Bug 84331

Summary: OpenSSL forces including Kerberos (include) support to programs not having any Kerberos in them originally.
Product: [Retired] Red Hat Raw Hide Reporter: matti aarnio <matti.aarnio>
Component: opensslAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED DUPLICATE QA Contact: Brian Brock <bbrock>
Severity: high Docs Contact:
Priority: medium    
Version: 1.0CC: jorton
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-02-21 18:51:48 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description matti aarnio 2003-02-14 16:30:02 UTC
Description of problem:
  Current Rawhide  OpenSSL-dev-0.9.7-*  seems to mandate to be compiled
  with Kerberos-5 development included in the system, AND APPLICATION,
  which uses OpenSSL at all.

  For software suites not knowing how to do Kerberos, that is "somewhat"
  excessive requirement.  Thus "Severity: high".

Version-Release number of selected component (if applicable):
  Current: 0.9.7

How reproducible:
  Compiling ZMailer suite -- probably any OpenSSL using non-kerberos using will do..

Steps to Reproduce:
1.
2.
3.
    
Actual results:
$ make
gcc -Wall -g -O  -DHAVE_CONFIG_H -I../../smtpserver/../include -I../include -I..
  -c ../../smtpserver/smtpserver.c
In file included from /usr/include/openssl/ssl.h:179,
                 from ../../smtpserver/smtpserver.h:175,
                 from ../../smtpserver/smtpserver.c:14:
/usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory
In file included from /usr/include/openssl/ssl.h:179,
                 from ../../smtpserver/smtpserver.h:175,
                 from ../../smtpserver/smtpserver.c:14:
/usr/include/openssl/kssl.h:132: parse error before "krb5_enctype"
/usr/include/openssl/kssl.h:134: parse error before "FAR"
....

The mssing  <krb5.h>  file is   /usr/kerberos/include/krb5.h  which
is packed in:  krb5-devel-1.2.7-7
Adding   -I/usr/kerberos/include   into  CFLAGS _does_ let this compilation
complete, nor does it need any Kerberos libraries to be linked,  however
as the system is otherwise non-aware of Kerberos[5], that should be unnecessary.


Expected results:
  Successfull compile without Kerberos need.

Additional info:
 i686 SMP machine, gcc-3.2.1-2

Comment 1 matti aarnio 2003-02-14 18:08:46 UTC
ZMailer source tarball:
  ftp://zmailer.org/zmailer/zmailer-2.99.56-pre4.tar.gz

Unpack, (will open into its own directory), enter that directory,
then:
  $ sh -x ./conf/conf.mea-linux-20030214
and after the configuration is complete, do:
  $ cd i386
  $ make

Have Red Hat Raw Hide system with OpenSSL-devel installed.


Comment 2 Joe Orton 2003-02-20 13:52:47 UTC
To compile against OpenSSL 0.9.7 you need to use the pkg-config support where
available; e.g. add `pkg-config --cflags openssl` to CFLAGS and `pkg-config
--libs openssl` to LIBS.

*** This bug has been marked as a duplicate of 82369 ***

Comment 3 matti aarnio 2003-02-20 14:31:10 UTC
As noted in comments of bugid 82369, in multiplatform application the use of
"pkg-config" isn't very practical.   Adding autocofiguration to detect, and
to use  pkg-config  (where available) is an option, of course.


Comment 4 Joe Orton 2003-02-20 15:02:48 UTC
Indeed - it's hard to use OpenSSL portably, full stop - this problem is not
limited to how we build OpenSSL for Red Hat Linux, hence the NOTABUG.  (For
example, -lssl -lcrypto is not good enough on some platforms, especially with
0.9.7, where sometimes -ldl is required, etc.)


Comment 5 Red Hat Bugzilla 2006-02-21 18:51:48 UTC
Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.