Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Jul 2010 16:46:37 +0300
From:      Kostik Belousov <kostikbel@gmail.com>
To:        Andrew Reilly <areilly@bigpond.net.au>
Cc:        freebsd-current@freebsd.org, Matthias Andree <mandree@freebsd.org>
Subject:   Re: Regression in GSSAPI/libxh509 linking? [PR bin/147175]
Message-ID:  <20100706134636.GG13238@deviant.kiev.zoral.com.ua>
In-Reply-To: <457406E5-0E8C-4DB0-97B3-C8CAA7DD3AD0@bigpond.net.au>
References:  <op.vfexgepa1e62zd@merlin.emma.line.org> <20100706085435.GC13238@deviant.kiev.zoral.com.ua> <4C3317C6.3020009@FreeBSD.org> <20100706123325.GF13238@deviant.kiev.zoral.com.ua> <457406E5-0E8C-4DB0-97B3-C8CAA7DD3AD0@bigpond.net.au>

next in thread | previous in thread | raw e-mail | index | archive | help

--ONdxGLNAH97Mj7h0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Tue, Jul 06, 2010 at 11:26:26PM +1000, Andrew Reilly wrote:
> Hi Kostik,
>=20
> On 06/07/2010, at 22:33 , Kostik Belousov wrote:
>=20
> > "Install evolution-data-server" as a reference to the command is a sure=
 way
> > to not get any help.
>=20
> Why, because no-one uses ports?
Because you make it hard to reproduce the issue. E.g. my head scratch
box definitely will not be put to evolution-data-server compilation to
reproduce this.

>=20
> > I asked for explicit command that fails, PR does not contain this infor=
mation.
> > It is not even clear whether the issue is from the static or run-time l=
inker.
>=20
> The specific command that fails is in the PR, to whit:
> cc -o conftest -O2 -pipe -g -DLDAP_DEPRECATED -fno-strict-aliasing -I/usr=
/local/include -I/usr/local/include/db41 -L/usr/local/lib -pthread conftest=
.c -L/usr/local/lib -L/usr/lib -lgssapi -lheimntlm -lkrb5 -lhx509 -lcom_err=
 -lcrypto -lasn1 -lroken -lcrypt
>=20
> where, in this instance, conftest.c is something like (extracted from the=
 configure script from evolution-data-server):
>=20
> /* contentes of confdefs.h, whatever that is, probably at least: */
> #include <krb5.h>
> /* end confdefs.h.  */
>=20
> /* Override any GCC internal prototype to avoid an error.
>   Use char because int might match the return type of a GCC
>   builtin and then its argument prototype would still apply.  */
> #ifdef __cplusplus
> extern "C"
> #endif
> char krb5_init_context ();
> int
> main ()
> {
> return krb5_init_context ();
>  ;
>  return 0;
> }
>=20
> (fetchmail uses a conftest with a call to gss_check_version(), but the re=
sult is the same.)
>=20
> And the cc fails with=20
> /usr/lib/libhx509.so: undefined reference to `MD2_Init'
> /usr/lib/libhx509.so: undefined reference to `MD2_Final'
> /usr/lib/libhx509.so: undefined reference to `MD2_Update'
>=20
> as reported in the PR.
Ok, this is useful. But, on the HEAD from Jul 2, I cannot reproduce it,
with conftest.c and command line above. As well as on the stable/8 that
is approx. one month old.

On both systems, MD2_* symbols are resolved by libcrypto.so. Check
your instance, do the symbols appear in the library ?

As a long shot, do you have openssl 1.0 installed from ports ?
Note the -L /usr/local/lib switch, that causes -lcrypto to be resolved
from /usr/local/lib, if present. AFAIR, 1.0 removed MD2.

>=20
> It doesn't do this on my system any more, because I've fixed it with the =
patch attached to that PR.
>=20
> Cheers,
>=20
> --=20
> Andrew
>=20

--ONdxGLNAH97Mj7h0
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (FreeBSD)

iEYEARECAAYFAkwzM7wACgkQC3+MBN1Mb4hCLwCguKt0sue/+hz6jDox/QSKo1H3
NXoAoNfTV9yBBFcHzN7xCAkV2VJevM6E
=r4SY
-----END PGP SIGNATURE-----

--ONdxGLNAH97Mj7h0--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100706134636.GG13238>