Re: chat/loudmouth finds netbsd-7 builtin OpenSSL, krb5 insufficient?

["John D. Baker" <jdbaker%mylinuxisp.com@localhost>]

On Thu, 22 Sep 2016, Jonathan Perkin wrote:

> * On 2016-09-21 at 23:34 BST, John D. Baker wrote:
>
> > Including "../../mk/krb5.buildlink3.mk" was not sufficient for my system.
> > It still picked up "/usr/pkg/bin/krb5-config" and subseqently failed,
> > unable to find "libgssapi", etc.
> 
> Not sure what's going on there, it might be picking up a pkgsrc
> version that was incorrectly installed.  Check the settings of
> KRB5_TYPE, IS_BUILTIN.<krb5type> and USE_BUILTIN.<krb5type>, and try
> building after removing the pkgsrc version and cleaning.

Following the latest update to "chat/loudmouth", I eliminated my hacks
and recursively removed "wireshark" and "abiword-plugins" which caused
"mit-krb5" to be removed.  (The removal of "abiword-plugins" was needed
because of my prior hacks on "chat/loudmouth".)

In this state, using "chat/loudmouth" as the reference:

  KRB5_TYPE=heimdal
  IS_BUILTIN.heimdal=yes
  USE_BUILTIN.heimdal=yes

The configure phase reports:

[...]
checking for krb5-config... /usr/bin/krb5-config
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking openssl/ssl.h usability... yes
checking openssl/ssl.h presence... yes
checking for openssl/ssl.h... yes
checking for BIO_f_base64 in -lcrypto... yes
checking for SSL_new in -lssl... yes
[...]

and the build succeeds.  It is interesting that builtin OpenSSL is now
found to be sufficient.

Re-enabling default kerberos support in "print/cups" shows the
same results for kerberos.


After re-installing "net/wireshark", which installs "security/mit-krb5"
as a dependency, repeating the tests above show the same results for
the variable values, but building "chat/loudmouth" fails during the
configure phase with:

[...]
checking for krb5-config... /usr/pkg/bin/krb5-config
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking openssl/ssl.h usability... yes
checking openssl/ssl.h presence... yes
checking for openssl/ssl.h... yes
checking for BIO_f_base64 in -lcrypto... no
configure: error: OpenSSL was not found, use --with-ssl=[no|gnutls] to
                  build without SSL support or with GnuTLS
*** Error code 1

Stop.
make[1]: stopped in /x/pkgsrc/chat/loudmouth
*** Error code 1

Stop.
make: stopped in /x/pkgsrc/chat/loudmouth


Likewise, for "print/cups", the variable values are the same, but
the configure phase reports:

[...]
checking for x86_64--netbsd-krb5-config... no
checking for krb5-config... /usr/pkg/bin/krb5-config
checking krb5.h usability... yes
checking krb5.h presence... yes
checking for krb5.h... yes
checking gssapi.h usability... yes
checking gssapi.h presence... yes
checking for gssapi.h... yes
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking for __ApplePrivate_gss_acquire_cred_ex_f... no
checking for GSS_C_NT_HOSTBASED_SERVICE... yes
[...]

and the build subsequently fails with:

[...]
Linking ippserver...
libtool: link: gcc -Wl,-R/usr/pkg/lib -fPIE -pie -Wall -Wno-format-y2k -Wunused -fPIC -Os -g -fstack-protector -Wno-unused-result -Wsign-conversion -Wno-tautological-compare -o ippserver ippserver.o  -L../cgi-bin -L../cups -L../filter -L../ppdc -L../scheduler -L/tmp/pkgsrc/print/cups/work/.buildlink/lib ../cups/libcups.a -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lgnutls -lc -ltasn1 -lhogweed -lnettle -lgmp -lintl -ldns_sd -lpthread -lm -lcrypt -lz -Wl,-rpath,/tmp/pkgsrc/print/cups/work/.buildlink/lib -Wl,-rpath,/tmp/pkgsrc/print/cups/work/.buildlink/lib
ld: cannot find -lgssapi_krb5
ld: cannot find -lk5crypto
Makefile:232: recipe for target 'ippserver' failed
gmake[1]: *** [ippserver] Error 1
gmake[1]: *** Waiting for unfinished jobs....
Makefile:31: recipe for target 'all' failed
gmake: *** [all] Error 1
*** Error code 2

Stop.
make[1]: stopped in /x/pkgsrc/print/cups
*** Error code 1

Stop.
make: stopped in /x/pkgsrc/print/cups


-- 
|/"\ John D. Baker, KN5UKS               NetBSD     Darwin/MacOS X
|\ / jdbaker[snail]mylinuxisp[flyspeck]com    OpenBSD            FreeBSD
| X  No HTML/proprietary data in email.   BSD just sits there and works!
|/ \ GPGkeyID:  D703 4A7E 479F 63F8 D3F4  BD99 9572 8F23 E4AD 1645