Stuart Henderson <[email protected]> writes:

> On 2016/11/01 10:30, Jeremie Courreges-Anglas wrote:
>> Jiri B <[email protected]> writes:
>> 
>> > Hi,
>> >
>> > after openldap got gssapi flavor I've decided to try gssapi for our
>> > curl as I would benefit from it everyday at work.
>> >
>> > But configuring curl with gssapi it does by some miracle disables
>> > ssl :/
>> >
>> > Any idea? (Building curl without gssapi of course keeps ssl option
>> > enabled.)
>> 
>> Using only your diff I can't get gssapi detected.  I suspect you have
>> local changes somewhere, perhaps in krb5-config?
>> 
>> Using the following heimdal diff, I have curl detect both gssapi and
>> libssl.
>> 
>> - krb5-config --libs should pass -R/usr/local/heimdal/libs to help ld.so
>>   find heimdal libs at runtime
>> - krb5-config --libs should pass -L/usr/local/lib because that's where
>>   libcom_err is.  If we add only -R/usr/local/heimdal/lib, later tests
>>   for functions in libcrypto/libssl fail because libcom_err isn't in the
>>   library search path.
>> 
>> Robert, any opinion regarding the following patch?
>
> Weren't we intentionally trying to avoid heimdal getting picked up unless
> a port went out of its way to enable it (by adding LDFLAGS/CPPFLAGS etc)..?

I thought that putting everything heimdal in /usr/local/heimdal was
sufficient.  krb5-config is in /usr/local/heimdal/bin, not in the
default PATH, unless security/heimdal is in MODULES, so a port has to be
explicit anyway.

> Changing this would need some careful testing to see what other things in
> ports try to pick it up.

Sure but, I can't think of a reason for a port to start picking up
heimdal with that change, unless if security/heimdal is in MODULES,
*and* the detection currently fails because of the missing flags.

sqlite> select * from modules where value like 'security/heimdal' ;
security/cyrus-sasl2,gssapi|security/heimdal
sysutils/login_krb5|security/heimdal
x11/gnome/control-center|security/heimdal
x11/gnome/initial-setup|security/heimdal

-- 
jca | PGP : 0x1524E7EE / 5135 92C1 AD36 5293 2BDF  DDCC 0DFA 74AE 1524 E7EE

Reply via email to