From owner-freebsd-current@FreeBSD.ORG Tue Jul 6 08:20:32 2010 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C3FEA1065674 for ; Tue, 6 Jul 2010 08:20:32 +0000 (UTC) (envelope-from matthias.andree@gmx.de) Received: from mail.gmx.net (mail.gmx.net [213.165.64.20]) by mx1.freebsd.org (Postfix) with SMTP id 178758FC1B for ; Tue, 6 Jul 2010 08:20:31 +0000 (UTC) Received: (qmail invoked by alias); 06 Jul 2010 08:20:30 -0000 Received: from g226236131.adsl.alicedsl.de (EHLO mandree.no-ip.org) [92.226.236.131] by mail.gmx.net (mp049) with SMTP; 06 Jul 2010 10:20:30 +0200 X-Authenticated: #428038 X-Provags-ID: V01U2FsdGVkX1/09awHBfr02S3l4tT/AxkbBuzm/gAe5zurRp8pOw gjXCf/SXoGHyvE Received: from merlin.emma.line.org (localhost [127.0.0.1]) by merlin.emma.line.org (Postfix) with ESMTP id ED93694951; Tue, 6 Jul 2010 10:20:28 +0200 (CEST) Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes To: freebsd-current@freebsd.org Date: Tue, 06 Jul 2010 10:20:28 +0200 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: "Matthias Andree" Organization: Message-ID: User-Agent: Opera Mail/10.60 (Linux) X-Y-GMX-Trusted: 0 Cc: Andrew Reilly Subject: Regression in GSSAPI/libxh509 linking? [PR bin/147175] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Jul 2010 08:20:32 -0000 Greetings, it appears that some change to -RECENT (relative to 8-STABLE) breaks linking several GSSAPI applications from ports, for instance, mail/fetchmail if GSSAPI is enabled. These applications then compile OK, but fail to link with MD2_Init and other MD2 symbols not defined, although the command line (obtained from krb5-config gssapi --libs) appears to list -lhx509 and -lcrypto in the right order (hx509 first). This is, according to the report, happening on -CURRENT, but does NOT happen on 8-STABLE or release candidates to 8.1. Andrew Reilly posted a patch to the base system Kerberos to bin/147175 to add a dependency from the shared hx509 library on libcrypto, however there are open questions neither he nor I can answer -- particularly if it's fixing the right problem, or if instead the run-time linker needed to be fixed. Please help: read PR bin/147175 and comment if you're knowledgeable about either run-time linking, KRB5/GSSAPI, or both :) Thank you. -- Matthias Andree