<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://bugs.gentoo.org/bugzilla.dtd">

<bugzilla version="2.22.7"
          urlbase="http://bugs.gentoo.org/"
          maintainer="bugzilla@gentoo.org"
>

    <bug>
          <bug_id>217021</bug_id>
          
          <creation_ts>2008-04-09 13:36 0000</creation_ts>
          <short_desc>app-crypt/mit-krb5-1.6.3-r1 missing dev-libs/openssl RDEPEND</short_desc>
          <delta_ts>2008-06-03 15:48:41 0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>Gentoo Linux</product>
          <component>Ebuilds</component>
          <version>unspecified</version>
          <rep_platform>AMD64</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          
          <priority>P2</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          
          <everconfirmed>1</everconfirmed>
          <reporter>lxnay@lxnaydesign.net</reporter>
          <assigned_to>kerberos@gentoo.org</assigned_to>
          

      

      
          <long_desc isprivate="0">
            <who>lxnay@lxnaydesign.net</who>
            <bug_when>2008-04-09 13:36:59 0000</bug_when>
            <thetext>/usr/lib64/krb5/plugins/preauth/pkinit.so wants: libcrypto.so.0.9.8

sabayon server x86_64 # readelf -d /usr/lib64/krb5/plugins/preauth/pkinit.so | grep NEEDED
 0x0000000000000001 (NEEDED)             Shared library: [libkrb5.so.3]
 0x0000000000000001 (NEEDED)             Shared library: [libcom_err.so.2]
 0x0000000000000001 (NEEDED)             Shared library: [libk5crypto.so.3]
 0x0000000000000001 (NEEDED)             Shared library: [libdl.so.2]
 0x0000000000000001 (NEEDED)             Shared library: [libkrb5support.so.0]
 0x0000000000000001 (NEEDED)             Shared library: [libcrypto.so.0.9.8]
 0x0000000000000001 (NEEDED)             Shared library: [libkeyutils.so.1]
 0x0000000000000001 (NEEDED)             Shared library: [libresolv.so.2]
 0x0000000000000001 (NEEDED)             Shared library: [libc.so.6]



package info:

sabayon server x86_64 # python reagent query search mit-krb5
&gt;&gt;  @@ Entropy Server Mirrors Interface loaded:
&gt;&gt;    # mirror: ftp://xxxxxxx:xxxxxxxx@svn.sabayonlinux.org/
&gt;&gt;  @@ Entropy Server Interface Instance on repository: sabayonlinux.org
&gt;&gt;      @@ Package: app-crypt/mit-krb5-1.6.3-r1         branch: 3.5
&gt;&gt;        Category:             app-crypt
&gt;&gt;        Name:                 mit-krb5
&gt;&gt;        Masked:               False
&gt;&gt;        Available:            version: 1.6.3-r1 ~ tag: NoTag ~ revision: 11
&gt;&gt;        Slot:                 0
&gt;&gt;        Size:                 2.0MB
&gt;&gt;        Download:             packages/amd64/3.5/app-crypt:mit-krb5-1.6.3-r1~11.tbz2
&gt;&gt;        Checksum:             06faa978c1f90bb08ec9180fa0ba29a9
&gt;&gt;        ## Dependencies:
&gt;&gt;        ##                    sys-libs/com_err
&gt;&gt;        ##                    sys-libs/ss
&gt;&gt;        ##                    sys-apps/keyutils:0
&gt;&gt;        ## Conflicts:
&gt;&gt;        ##                    virtual/krb5
&gt;&gt;        Homepage:             http://web.mit.edu/kerberos/www/
&gt;&gt;        Description:          MIT Kerberos V
&gt;&gt;        USE flags:            -elibc_glibc -userland_GNU -kernel_linux
&gt;&gt;                              -amd64 ipv6
&gt;&gt;        CHOST:                x86_64-pc-linux-gnu
&gt;&gt;        CFLAGS:               -Os -march=x86-64 -pipe
&gt;&gt;        CXXFLAGS:             -Os -march=x86-64 -pipe
&gt;&gt;        Gentoo eclasses:      autotools toolchain-funcs portability flag-o-matic libtool versionator multilib eutils
&gt;&gt;        Sources:
&gt;&gt;          # Source: mirror://gentoo/mit-krb5-1.6.3-patches-0.3.tar.bz2
&gt;&gt;          # Source: http://web.mit.edu/kerberos/dist/krb5/1.6/krb5-1.6.3-signed.tar
&gt;&gt;          # Source: http://dev.gentoo.org/~jokey/mit-krb5-1.6.3-patches-0.3.tar.bz2
&gt;&gt;        Entry API:            2
&gt;&gt;        Keywords:             ppc amd64 ~mips ppc64 m68k arm ~sh sparc ~s390 ia64 alpha hppa x86
&gt;&gt;        Created:              2008-04-09 14:37:34
&gt;&gt;        License:              as-is

cheers :)


Reproducible: Always</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>mueli@gentoo.org</who>
            <bug_when>2008-04-14 12:48:37 0000</bug_when>
            <thetext>I see - the problem is the following in configure.in

if test &quot;$k5_cv_openssl_version_okay&quot; = yes; then
  AC_CONFIG_SUBDIRS(plugins/preauth/pkinit)
fi

That means pkinit is only built if openssl is installed. That&apos;s of course a dangerous situation for binary packages which are transfered. Perhaps it would be a solution to add the ssl USE to mit-krb5. Can you please post an emerge --info?

g, mueli</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cardoe@gentoo.org</who>
            <bug_when>2008-06-02 19:04:06 0000</bug_when>
            <thetext>(In reply to comment #1)
&gt; I see - the problem is the following in configure.in
&gt; 
&gt; if test &quot;$k5_cv_openssl_version_okay&quot; = yes; then
&gt;   AC_CONFIG_SUBDIRS(plugins/preauth/pkinit)
&gt; fi
&gt; 
&gt; That means pkinit is only built if openssl is installed. That&apos;s of course a
&gt; dangerous situation for binary packages which are transfered. Perhaps it would
&gt; be a solution to add the ssl USE to mit-krb5. Can you please post an emerge
&gt; --info?
&gt; 
&gt; g, mueli
&gt; 

Further more it&apos;s complicated by the fact that its gotta be openssl 0.9.8 or newer.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cardoe@gentoo.org</who>
            <bug_when>2008-06-02 19:05:41 0000</bug_when>
            <thetext>For the time being until a patch is written, this needs to hard dep on openssl-0.9.8</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>cardoe@gentoo.org</who>
            <bug_when>2008-06-03 13:55:39 0000</bug_when>
            <thetext>fixed with a hard dep. if we need a USE flag, it should go in another bug.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <who>lxnay@lxnaydesign.net</who>
            <bug_when>2008-06-03 15:48:41 0000</bug_when>
            <thetext>Thanks!</thetext>
          </long_desc>
      
    </bug>

</bugzilla>