Bug 237516 – net-misc/curl-7.18.2 - checking default CA cert bundle/path... configure: error: --with-ca-path only works with openSSL

• Product: Gentoo Linux
• Status: RESOLVED WORKSFORME

[Description John D Jones III 2008-09-12 19:28:45 UTC]

I was initially doing my second emerge world and when it gets to the Curl package, it keeps failing during the configure:

checking for zlib.h... yes
checking for gzread in -lz... no
configure: WARNING: configure found only the libz header file, not the lib!
configure: WARNING: SSL disabled, you will not be able to use HTTPS, FTPS, NTLM and more.
configure: WARNING: Use --with-ssl, --with-gnutls or --with-nss to address this.
checking default CA cert bundle/path... configure: error: --with-ca-path only works with openSSL

OpenSSL is installed, and i've got the USE ssl flag set. Also, I reinstalled zlib so the libz is in fact there.

Reproducible: Always

Steps to Reproduce:
1. emerge --deep --newuse -tav world
2. 'Sit and let it do it's thing'
3.

Actual Results:  
>>> Verifying ebuild manifests

>>> Starting parallel fetch

>>> Emerging (1 of 39) net-misc/curl-7.18.2
 * curl-7.18.2.tar.bz2 RMD160 SHA1 SHA256 size ;-) ...                                                                                [ ok ]
 * checking ebuild checksums ;-) ...                                                                                                  [ ok ]
 * checking auxfile checksums ;-) ...                                                                                                 [ ok ]
 * checking miscfile checksums ;-) ...                                                                                                [ ok ]
>>> Unpacking source...
>>> Unpacking curl-7.18.2.tar.bz2 to /var/tmp/portage/net-misc/curl-7.18.2/work
 * Applying curl-7.17.0-strip-ldflags.patch ...                                                                                        [ ok ]
>>> Source unpacked.
>>> Compiling source in /var/tmp/portage/net-misc/curl-7.18.2/work/curl-7.18.2 ...
 * econf: updating curl-7.18.2/config.guess with /usr/share/gnuconfig/config.guess
 * econf: updating curl-7.18.2/config.sub with /usr/share/gnuconfig/config.sub
./configure --prefix=/usr --host=x86_64-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --enable-ldap --enable-ldaps --without-libidn --with-gssapi=/usr --without-libssh2 --enable-ipv6 --enable-http --enable-ftp --enable-gopher --enable-file --enable-dict --enable-manual --enable-telnet --enable-nonblocking --enable-largefile --enable-maintainer-mode --disable-sspi --without-krb4 --without-spnego --disable-ares --without-gnutls --without-nss --with-ssl --without-ca-bundle --with-ca-path=/etc/ssl/certs --libdir=/usr/lib64 --build=x86_64-pc-linux-gnu
checking whether to enable maintainer-specific portions of Makefiles... yes
checking for sed... /bin/sed
checking for x86_64-pc-linux-gnu-ar... x86_64-pc-linux-gnu-ar
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking curl version... 7.18.2
checking build system type... x86_64-pc-linux-gnu
checking host system type... x86_64-pc-linux-gnu
checking for style of include used by make... GNU
checking for x86_64-pc-linux-gnu-gcc... x86_64-pc-linux-gnu-gcc
checking for C compiler default output file name... a.out
checking whether the C compiler works... yes
checking whether we are cross compiling... no
checking for suffix of executables...
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether x86_64-pc-linux-gnu-gcc accepts -g... yes
checking for x86_64-pc-linux-gnu-gcc option to accept ISO C89... none needed
checking dependency style of x86_64-pc-linux-gnu-gcc... gcc3
checking how to run the C preprocessor... x86_64-pc-linux-gnu-gcc -E
checking for grep that handles long lines and -e... /bin/grep
checking for egrep... /bin/grep -E
checking for AIX... no
checking for x86_64-pc-linux-gnu-gcc... (cached) x86_64-pc-linux-gnu-gcc
checking whether we are using the GNU C compiler... (cached) yes
checking whether x86_64-pc-linux-gnu-gcc accepts -g... (cached) yes
checking for x86_64-pc-linux-gnu-gcc option to accept ISO C89... (cached) none needed
checking dependency style of x86_64-pc-linux-gnu-gcc... (cached) gcc3
checking for special C compiler options needed for large files... no
checking for _FILE_OFFSET_BITS value needed for large files... no
checking if arch-OS host is AMD64-linux (to build static libraries with PIC)... yes
checking for a sed that does not truncate output... /bin/sed
checking for ld used by x86_64-pc-linux-gnu-gcc... /usr/x86_64-pc-linux-gnu/bin/ld
checking if the linker (/usr/x86_64-pc-linux-gnu/bin/ld) is GNU ld... yes
checking for /usr/x86_64-pc-linux-gnu/bin/ld option to reload object files... -r
checking for BSD-compatible nm... /usr/bin/nm -B
checking whether ln -s works... yes
checking how to recognize dependent libraries... pass_all
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking dlfcn.h usability... yes
checking dlfcn.h presence... yes
checking for dlfcn.h... yes
checking the maximum length of command line arguments... 1572864
checking command to parse /usr/bin/nm -B output from x86_64-pc-linux-gnu-gcc object... ok
checking for objdir... .libs
checking for x86_64-pc-linux-gnu-ar... (cached) x86_64-pc-linux-gnu-ar
checking for x86_64-pc-linux-gnu-ranlib... x86_64-pc-linux-gnu-ranlib
checking for x86_64-pc-linux-gnu-strip... x86_64-pc-linux-gnu-strip
checking if x86_64-pc-linux-gnu-gcc supports -fno-rtti -fno-exceptions... no
checking for x86_64-pc-linux-gnu-gcc option to produce PIC... -fPIC
checking if x86_64-pc-linux-gnu-gcc PIC flag -fPIC works... yes
checking if x86_64-pc-linux-gnu-gcc static flag -static works... yes
checking if x86_64-pc-linux-gnu-gcc supports -c -o file.o... yes
checking whether the x86_64-pc-linux-gnu-gcc linker (/usr/x86_64-pc-linux-gnu/bin/ld -m elf_x86_64) supports shared libraries... yes
checking whether -lc should be explicitly linked in... no
checking dynamic linker characteristics... GNU/Linux ld.so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
configure: creating libtool
checking if we need -no-undefined... no
checking if we need -mimpure-text... no
checking if we need BUILDING_LIBCURL... no
checking whether make sets $(MAKE)... (cached) yes
checking for inline... inline
checking for windows.h... no
checking whether build target is a native Windows one... no
checking for icc in use... no
checking whether to support http... yes
checking whether to support ftp... yes
checking whether to support file... yes
checking whether to support ldap... yes
checking whether to support ldaps... yes
checking whether to support dict... yes
checking whether to support telnet... yes
checking whether to support tftp... yes
checking whether to provide built-in manual... yes
checking for icc in use... no
checking for gethostbyname... yes
checking for strcasecmp... yes
checking for connect... yes
checking whether time.h and sys/time.h may both be included... yes
checking for sys/types.h... (cached) yes
checking sys/time.h usability... yes
checking sys/time.h presence... yes
checking for sys/time.h... yes
checking time.h usability... yes
checking time.h presence... yes
checking for time.h... yes
checking for monotonic clock_gettime... yes
checking for clock_gettime in libraries... -lrt
checking whether to use libgcc... no
checking for lber.h... yes
checking for ldap.h... yes
checking for ldapssl.h... no
checking for ldap_ssl.h... no
checking for LDAP libraries... -lldap
checking for ldap_url_parse... yes
checking whether to enable ipv6... yes
checking non-blocking sockets style... O_NONBLOCK
checking if argv can be written to... yes
checking if Kerberos4 support is requested... no
checking if SPNEGO support is requested... no
checking if GSSAPI support is requested... yes
checking gss.h usability... no
checking gss.h presence... no
checking for gss.h... no
checking gssapi/gssapi.h usability... yes
checking gssapi/gssapi.h presence... yes
checking for gssapi/gssapi.h... yes
checking gssapi/gssapi_generic.h usability... yes
checking gssapi/gssapi_generic.h presence... yes
checking for gssapi/gssapi_generic.h... yes
checking gssapi/gssapi_krb5.h usability... yes
checking gssapi/gssapi_krb5.h presence... yes
checking for gssapi/gssapi_krb5.h... yes
checking if gssapi headers declare GSS_C_NT_HOSTBASED_SERVICE... yes
checking for pkg-config... /usr/bin/pkg-config
checking OpenSSL options with pkg-config... found
checking for gdi32... no
checking for CRYPTO_lock in -lcrypto... no
checking for CRYPTO_add_lock in -lcrypto... no
checking for inflateEnd in -lz... no
checking zlib.h usability... yes
checking zlib.h presence... yes
checking for zlib.h... yes
checking for gzread in -lz... no
configure: WARNING: configure found only the libz header file, not the lib!
configure: WARNING: SSL disabled, you will not be able to use HTTPS, FTPS, NTLM and more.
configure: WARNING: Use --with-ssl, --with-gnutls or --with-nss to address this.
checking default CA cert bundle/path... configure: error: --with-ca-path only works with openSSL

!!! Please attach the following file when seeking support:
!!! /var/tmp/portage/net-misc/curl-7.18.2/work/curl-7.18.2/config.log
 *
 * ERROR: net-misc/curl-7.18.2 failed.
 * Call stack:
 *               ebuild.sh, line   49:  Called src_compile
 *             environment, line 2625:  Called econf '--enable-ldap' '--enable-ldaps' '--without-libidn' '--with-gssapi=/usr' '--without-libssh2' '--enable-ipv6' '--enable-http' '--enable-ftp' '--enable-gopher' '--enable-file' '--enable-dict' '--enable-manual' '--enable-telnet' '--enable-nonblocking' '--enable-largefile' '--enable-maintainer-mode' '--disable-sspi' '--without-krb4' '--without-spnego' '--disable-ares' '--without-gnutls' '--without-nss' '--with-ssl' '--without-ca-bundle' '--with-ca-path=/etc/ssl/certs'
 *               ebuild.sh, line  538:  Called die
 * The specific snippet of code:
 *                      die "econf failed"
 *  The die message:
 *   econf failed
 *
 * If you need support, post the topmost build error, and the call stack if relevant.
 * A complete build log is located at '/var/tmp/portage/net-misc/curl-7.18.2/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/net-misc/curl-7.18.2/temp/environment'.
 *

 * Messages for package net-misc/curl-7.18.2:

 *
 * ERROR: net-misc/curl-7.18.2 failed.
 * Call stack:
 *               ebuild.sh, line   49:  Called src_compile
 *             environment, line 2625:  Called econf '--enable-ldap' '--enable-ldaps' '--without-libidn' '--with-gssapi=/usr' '--without-libssh2' '--enable-ipv6' '--enable-http' '--enable-ftp' '--enable-gopher' '--enable-file' '--enable-dict' '--enable-manual' '--enable-telnet' '--enable-nonblocking' '--enable-largefile' '--enable-maintainer-mode' '--disable-sspi' '--without-krb4' '--without-spnego' '--disable-ares' '--without-gnutls' '--without-nss' '--with-ssl' '--without-ca-bundle' '--with-ca-path=/etc/ssl/certs'
 *               ebuild.sh, line  538:  Called die
 * The specific snippet of code:
 *                      die "econf failed"
 *  The die message:
 *   econf failed
 *
 * If you need support, post the topmost build error, and the call stack if relevant.
 * A complete build log is located at '/var/tmp/portage/net-misc/curl-7.18.2/temp/build.log'.
 * The ebuild environment file is located at '/var/tmp/portage/net-misc/curl-7.18.2/temp/environment'.


Expected Results:  
It should have upgraded my stuff ;-)

# emerge --info                                                                              [09/12/08][13:27:02]
Portage 2.2_rc8 (default/linux/amd64/2008.0/desktop, gcc-4.3.1, glibc-2.8_p20080602-r0, 2.6.26-gentoo-r1 x86_64)
=================================================================
System uname: Linux-2.6.26-gentoo-r1-x86_64-AMD_Athlon-tm-_64_X2_Dual_Core_Processor_4000+-with-glibc2.2.5
Timestamp of tree: Thu, 11 Sep 2008 06:00:01 +0000
app-shells/bash:     3.2_p39
dev-java/java-config: 1.3.7, 2.1.6-r1
dev-lang/python:     2.4.4-r13, 2.5.2-r7
sys-apps/baselayout: 2.0.0
sys-apps/openrc:     0.2.5
sys-apps/sandbox:    1.2.18.1-r3
sys-devel/autoconf:  2.13, 2.62-r1
sys-devel/automake:  1.4_p6, 1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10.1-r1
sys-devel/binutils:  2.18-r3
sys-devel/gcc-config: 1.4.0-r4
sys-devel/libtool:   2.2.4
virtual/os-headers:  2.6.26
ACCEPT_KEYWORDS="amd64 ~amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/config"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks parallel-fetch preserve-libs sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/linux/distributions/gentoo"
LDFLAGS="-Wl,-O1"
LINGUAS="en en_US"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/mozilla /usr/portage/local/layman/java-overlay /usr/portage/local/layman/games"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X aac acl acpi alsa amd64 arts avahi bash-completion berkdb bluetooth branding bzip2 cairo cdr cli cracklib crypt cscope cups dbus divx dri dvd dvdr dvdread emboss encode esd evo exif fam firefox3 flac fortran gdbm gif gmedia gpm gstreamer gtk hal iconv ipod ipv6 isdnlog joystick jpeg kde kerberos ldap libnotify lzo mad matroska mdnsresponder-compat midi mikmod mmx mozdevelop mp3 mpeg mudflap multilib ncurses nls nptl nptlonly objc objc++ offensive ogg opengl openmp pam pcre pdf perl png ppds pppd prediction python qt3 qt3support qt4 quicktime readline realmedia reflection scrobbler sdl session spell spl sse ssl startup-notification svg sysfs tcpd tiff truetype unicode usb vcd vim vim-pager vim-with-x vorbis wmp xinerama xml xorg xscreensaver xulrunner xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en en_US" USERLAND="GNU" VIDEO_CARDS="fbdev glint i810 mach64 mga neomagic nv r128 radeon savage sis tdfx trident vesa vga via vmware voodoo"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, MAKEOPTS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Rafał Mużyło 2008-09-12 19:55:10 UTC]

config.log, please.

[Comment 2 John D Jones III 2008-09-12 20:08:00 UTC]

Created attachment 165305 [details]
Requested config.log

[Comment 3 Rafał Mużyło 2008-09-12 20:33:15 UTC]

Hmm...
The first incorrect check seems to be the following:
x86_64-pc-linux-gnu-gcc -o conftest -O2 -pipe   -I/usr/kerberos/include   -Wl,-O1   conftest.c -lgdi32 -lldap -lrt -L/usr/lib64 -Wl,-rpath -Wl,/usr/lib64 -O2 -pipe $(LDFLAGS) -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv -ldl -L/usr/lib64 -Wl,-rpath -Wl,/usr/lib64 -O2 -pipe $(LDFLAGS) -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv -ldl -lssl -lcrypto -ldl   >&5

The incorrect part is $(LDFLAGS). It should be expanded,
but for some reason it's not. Somehow, it got added to LIBS
variable. What's more it seems doubled.

Now, let's hear from the experts.
But in the meantime, check what does `pkg-config openssl --libs`
print for you.

[Comment 4 John D Jones III 2008-09-13 07:01:00 UTC]

jnbek@nehemiah9:~% pkg-config openssl --libs                                                                             [09/12/08][0:23:28]
-lssl -lcrypto -ldl
jnbek@nehemiah9:~%     

[Comment 5 cucu ionut 2008-09-15 07:33:13 UTC]

I can confirm this also with x86_64-pc-linux-gnu-4.3.1

[Comment 6 Daniel Black (RETIRED) 2009-03-08 01:26:47 UTC]

couldn't reproduce with net-misc/curl-7.19.4
hoping it has been fixed upstream.

let me know the emerge -pv curl output if this is still failing and reopen this bug.

[Comment 7 René 'Necoro' Neumann 2009-03-08 20:50:07 UTC]

A user in the German Gentoo Forums also noticed this failure [1]. As there were three commonalities between this bug reporter and the one in the forum (x86_64, kerberos and ldap flag enabled), I asked him to disable ldap and/or kerberos. Disabling these two actually made it compile (I forgot to ask, whether he tried to disable only one of them - will do that now)

So I ask to re-open the bug ...

[1] http://forums.gentoo.org/viewtopic-t-743249.html (emerge --info included)

[Comment 8 Rafał Mużyło 2009-03-22 20:06:47 UTC]

For those still interested, it seems that this bug
was actually a duplicate of bug 237273.
Those still affected, please test.