Re: pkg/52753: postgresql95-server build fails with PREFER_PKGSRC=openssl

[David Holland <dholland-pbugs%netbsd.org@localhost>]

The following reply was made to PR pkg/52753; it has been noted by GNATS.

From: David Holland <dholland-pbugs%netbsd.org@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/52753: postgresql95-server build fails with
 PREFER_PKGSRC=openssl
Date: Fri, 15 Dec 2017 17:08:04 +0000

 On Fri, Nov 24, 2017 at 08:15:01AM +0000, Andreas Gustafsson wrote:
  >  I don't "want" to use Kerberos from base - if the base Kerberos is
  >  the cause of the conflict, it's because it's used by default.
  >  
  >  Are you saying that setting (only) PREFER_PKGSRC=openssl in
  >  /etc/mk.conf is not the correct way of selecting the pkgsrc
  >  OpenSSL for pkgsrc as a whole?  If so, what is the correct way?
 
 It is for pkgsrc as a whole, but it doesn't affect base, and
 unfortunately pkgsrc can't easily know what base is doing.
 
 You'd probably best also add everything in base that's linked against
 openssl to PREFER_PKGSRC, because linking with two versions of openssl
 at once is never going to work.
 
 It would be nice to have a way for pkgsrc to crosscheck this. In fact,
 come to think of it, it might already -- if the buildlink tree
 includes the dependence of krb on openssl, and USE_BUILTIN.openssl
 ends up no, then it'll also force USE_BUILTIN.heimdal to no. At least,
 provided that the setting of KRB5_TYPE doesn't gum up the works, which
 it might. You may have just been bitten by PR 52787, because postgres
 was using krb5 without including its bl3.
 
 Of course that'll cause it to build krb5 from pkgsrc, which you
 probably don't want. Now that 52787 is fixed you can just turn off
 kerberos in postgres instead by setting PKG_OPTIONS.postgresql95=-gssapi.
 
 -- 
 David A. Holland
 dholland%netbsd.org@localhost