Bug 458631

Summary: Setkey is unnecessarily linked to libcrypto and other libraries
Product: Red Hat Enterprise Linux 5 Reporter: Tomas Mraz <tmraz>
Component: ipsec-toolsAssignee: Tomas Mraz <tmraz>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 5.2CC: mkoci, riek, sgrubb
Target Milestone: rcKeywords: Regression
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: ipsec-tools-0.6.5-11.el5 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-01-20 22:13:33 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Tomas Mraz 2008-08-11 07:58:19 UTC
Setkey and some other binaries in ipsec-tools are unnecessarily linked to libcrypto and other libraries (gssapi, krb5 and so on). Only racoon needs to be linked to these libraries.

This problem was fixed in RHEL-4 by adding -Wl,--as-needed to LDFLAGS but unfortunately although the patch is still applied the change is overwritten by autoconf run. So this is a regression against RHEL-4.

Comment 1 RHEL Program Management 2008-08-11 08:07:13 UTC
This bugzilla has Keywords: Regression.  

Since no regressions are allowed between releases, 
it is also being proposed as a blocker for this release.  

Please resolve ASAP.

Comment 6 errata-xmlrpc 2009-01-20 22:13:33 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2009-0239.html