Red Hat Bugzilla – Bug 84331
OpenSSL forces including Kerberos (include) support to programs not having any Kerberos in them originally.
Last modified: 2007-04-18 12:51:14 EDT
Description of problem: Current Rawhide OpenSSL-dev-0.9.7-* seems to mandate to be compiled with Kerberos-5 development included in the system, AND APPLICATION, which uses OpenSSL at all. For software suites not knowing how to do Kerberos, that is "somewhat" excessive requirement. Thus "Severity: high". Version-Release number of selected component (if applicable): Current: 0.9.7 How reproducible: Compiling ZMailer suite -- probably any OpenSSL using non-kerberos using will do.. Steps to Reproduce: 1. 2. 3. Actual results: $ make gcc -Wall -g -O -DHAVE_CONFIG_H -I../../smtpserver/../include -I../include -I.. -c ../../smtpserver/smtpserver.c In file included from /usr/include/openssl/ssl.h:179, from ../../smtpserver/smtpserver.h:175, from ../../smtpserver/smtpserver.c:14: /usr/include/openssl/kssl.h:72:18: krb5.h: No such file or directory In file included from /usr/include/openssl/ssl.h:179, from ../../smtpserver/smtpserver.h:175, from ../../smtpserver/smtpserver.c:14: /usr/include/openssl/kssl.h:132: parse error before "krb5_enctype" /usr/include/openssl/kssl.h:134: parse error before "FAR" .... The mssing <krb5.h> file is /usr/kerberos/include/krb5.h which is packed in: krb5-devel-1.2.7-7 Adding -I/usr/kerberos/include into CFLAGS _does_ let this compilation complete, nor does it need any Kerberos libraries to be linked, however as the system is otherwise non-aware of Kerberos[5], that should be unnecessary. Expected results: Successfull compile without Kerberos need. Additional info: i686 SMP machine, gcc-3.2.1-2
ZMailer source tarball: ftp://zmailer.org/zmailer/zmailer-2.99.56-pre4.tar.gz Unpack, (will open into its own directory), enter that directory, then: $ sh -x ./conf/conf.mea-linux-20030214 and after the configuration is complete, do: $ cd i386 $ make Have Red Hat Raw Hide system with OpenSSL-devel installed.
To compile against OpenSSL 0.9.7 you need to use the pkg-config support where available; e.g. add `pkg-config --cflags openssl` to CFLAGS and `pkg-config --libs openssl` to LIBS. *** This bug has been marked as a duplicate of 82369 ***
As noted in comments of bugid 82369, in multiplatform application the use of "pkg-config" isn't very practical. Adding autocofiguration to detect, and to use pkg-config (where available) is an option, of course.
Indeed - it's hard to use OpenSSL portably, full stop - this problem is not limited to how we build OpenSSL for Red Hat Linux, hence the NOTABUG. (For example, -lssl -lcrypto is not good enough on some platforms, especially with 0.9.7, where sometimes -ldl is required, etc.)
Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.