# ldd /usr/sbin/zabbix_server |grep "libidn\|libcrypto\|libssl" libcrypto.so.1.0.0 => /usr/lib/libcrypto.so.1.0.0 (0xa4c10000) libidn.so.11 => /usr/lib/libidn.so.11 (0xa4a16000) libssl.so.1.0.0 => /usr/lib/libssl.so.1.0.0 (0xa49be000) Ebuild doesn't have dependencies to openssl and libidn. Reproducible: Always # emerge --info FEATURES variable contains unknown value(s): Xfail-clean, Xkeepwork, Xnoclean, Xnostrip, Xtest Portage 2.1.9.42 (hardened/linux/x86, gcc-4.5.2, libc-0-r0, 2.6.36-hardened-r7 i686) ================================================================= System uname: Linux-2.6.36-hardened-r7-i686-Pentium-R-_Dual-Core_CPU_E6300_@_2.80GHz-with-gentoo-1.12.14 Timestamp of tree: Mon, 09 May 2011 21:00:01 +0000 ccache version 3.1.4 [enabled] app-shells/bash: 4.1_p9 dev-lang/python: 2.7.1-r1, 3.1.3-r1 dev-util/ccache: 3.1.4 dev-util/cmake: 2.8.1-r2 sys-apps/baselayout: 1.12.14-r1 sys-apps/sandbox: 2.4 sys-devel/autoconf: 2.65-r1 sys-devel/automake: 1.10.3, 1.11.1 sys-devel/binutils: 2.20.1-r1 sys-devel/gcc: 4.4.5, 4.5.2 sys-devel/gcc-config: 1.4.1-r1 sys-devel/libtool: 2.2.10 sys-devel/make: 3.81-r2 sys-kernel/linux-headers: 2.6.36.1 sys-libs/glibc: 2.11.3 virtual/os-headers: 0 ACCEPT_KEYWORDS="x86" ACCEPT_LICENSE="* -@EULA" CBUILD="i686-pc-linux-gnu" CFLAGS="-O2 -march=native -mfpmath=sse -pipe -fprefetch-loop-arrays -fomit-frame-pointer -fpeel-loops -frename-registers -fpredictive-commoning -fweb -ftree-v ectorize -floop-interchange -ftree-loop-distribution -fivopts -floop-block -floop-strip-mine -s -fira-loop-pressure" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa /var/bind" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/eselect/postgresql /etc/fonts/fonts.conf /etc/gconf /etc/php/apache2-php5.3/ext-active/ /etc/ph p/cgi-php5.3/ext-active/ /etc/php/cli-php5.3/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-O2 -march=native -mfpmath=sse -pipe -fprefetch-loop-arrays -fomit-frame-pointer -fpeel-loops -frename-registers -fpredictive-commoning -fweb -ftree -vectorize -floop-interchange -ftree-loop-distribution -fivopts -floop-block -floop-strip-mine -s -fira-loop-pressure" DISTDIR="/usr/portage/distfiles" FEATURES="Xfail-clean Xkeepwork Xnoclean Xnostrip Xtest assume-digests binpkg-logs ccache collision-protect distlocks fixlafiles fixpackages news parallel-fet ch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox" FFLAGS="" GENTOO_MIRRORS="http://trumpetti.atm.tut.fi/gentoo/" LANG="pl" LC_ALL="pl_PL.utf-8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="pl" MAKEOPTS="-j1" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_EXTRA_OPTS="-6 -y --no-whole-file -O --delete-delay" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exc lude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/portage/local/layman/sunrise /usr/portage/local/layman/science /usr/portage/local/layman/sping /usr/portage/local/layman/steev /usr/port age/local/layman/gnustep /usr/portage/local/layman/mgorny /usr/portage/local /usr/local/portage/miro/staging /usr/local/portage/miro/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="acl acpi adns aio apache2 ares bash-completion bcmath bzip2 caps chroot clamav clamdtop cli cracklib crypt curl custom-cflags cxx dkim dri dsn enscript e xiscan exiscan-acl fastcgi force-cgi-redirect glibc-omitfp graphite hardened iconv idn imap iproute2 ipv6 logrotate maildir mmap mmx modules mudflap ncurses n etwork-cron nls nptl nptlonly openmp openssl pam pcre pic pppd readline server session slang spell srs sse sse2 sse3 ssl ssse3 subversion suhosin sysfs syslog threads threadsafe tools unicode urandom vhosts vim vim-pager vim-syntax x86 xattr xorg zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca010 6 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_P LUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route s hare shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon auth_digest authn_dbm authn_default authn_file authz_dbm authz_default auth z_groupfile authz_host authz_owner authz_user cache cgid dav dav_fs dav_lock dir disk_cache env expires ext_filter file_cache filter headers include info log_ config logio mem_cache mime mime_magic negotiation rewrite setenvif status unique_id usertrack vhost_alias" APACHE2_MPMS="prefork" CAMERAS="ptp2" COLLECTD_PLU GINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mt k3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="keyboard mouse evdev" KER NEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="pl" NGINX_MODULES_HTTP="access browser charset gzip m ap limit_zone proxy rewrite stub_status" PHP_TARGETS="php5-3" USERLAND="GNU" VIDEO_CARDS="apm ark chips cirrus cyrix dummy fbdev glint i128 i740 intel mach64 mga neomagic nsc nv r128 radeon rendition s3 s3virge savage siliconmotion sis sisusb tdfx tga trident tseng v4l vesa via vmware nouveau" XTABLES_ADDONS="geoip ipset psd tarpit" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS
scanelf -n /usr/sbin/zabbix_server TYPE NEEDED FILE ET_DYN libiksemel.so.3,libnetsnmp.so.15,libcrypto.so.1.0.0,libpq.so.5,libm.so.6,librt.so.1,libresolv.so.2,libc.so.6 /usr/sbin/zabbix_server So zabbix_server automagically links to libcrypto only.
(In reply to comment #1) > scanelf -n /usr/sbin/zabbix_server > TYPE NEEDED FILE > ET_DYN > libiksemel.so.3,libnetsnmp.so.15,libcrypto.so.1.0.0,libpq.so.5,libm.so.6,librt.so.1,libresolv.so.2,libc.so.6 > /usr/sbin/zabbix_server > > So zabbix_server automagically links to libcrypto only. Ok, how do we handle that best? And which package provides libcrypto? I don't mind an explicit dependency to make it nice and shiny ...
Libcrypto belongs to openssl. Zabbis_server links with libcrypto when is compiled with USE=snmp. I've compiled net-snmp without ssl (and it doesn't links to libcrypto), next i've reemerged zabbix. Zabbix_server still links to libcrypto. So i did: - emerge -C openssl - USE=-ssl emerge -1 net-snmp (no problem) - USE=snmp emerge -1 zabbix , configure failed on this (taken from config.log): configure:9572: x86_64-pc-linux-gnu-gcc -o conftest -march=native -O2 -pipe -I/usr/include/postgresql-9.0 -I. -I/usr/include -rdynamic -Wl,-O1 -Wl,--as-needed -L/usr/lib64 -lnetsnmp -lcrypto conftest.c -lnetsnmp -lm -lrt -lresolv >&5 /usr/lib/gcc/x86_64-pc-linux-gnu/4.5.2/../../../../x86_64-pc-linux-gnu/bin/ld: cannot find -lcrypto It looks configure script always wants libcrypto when wants to use libnetsnmpd (even when snmpd is compiled withous ssl support). It's a little strange for me. It starts autotools magic here, it's too magic for me. I give up and stop dig it deeper.
Given that there is no promised upgrade path from 1.9.x releases to 2.0, that 1.9.x are known to be have show stopping bugs (run at your own risk), and zabbix 2.0 will likely be released in the near future - I'm not planning on spending time fixing the earlier 1.9.x ebuilds which I've already package masked - when 2.0 is released, we can completely review all the use flags. Marking this bug as "resolved - wont fix" for now.