Regression in GSSAPI/libxh509 linking? [PR bin/147175]

Kostik Belousov kostikbel at
Tue Jul 6 08:54:50 UTC 2010

On Tue, Jul 06, 2010 at 10:20:28AM +0200, Matthias Andree wrote:
> Greetings,
> it appears that some change to -RECENT (relative to 8-STABLE) breaks  
> linking several GSSAPI applications from ports, for instance,  
> mail/fetchmail if GSSAPI is enabled.
> These applications then compile OK, but fail to link with MD2_Init and  
> other MD2 symbols not defined, although the command line (obtained from  
> krb5-config gssapi --libs) appears to list -lhx509 and -lcrypto in the  
> right order (hx509 first). This is, according to the report, happening on  
> -CURRENT, but does NOT happen on 8-STABLE or release candidates to 8.1.
> Andrew Reilly posted a patch to the base system Kerberos to bin/147175 to  
> add a dependency from the shared hx509 library on libcrypto, however there  
> are open questions neither he nor I can answer -- particularly if it's  
> fixing the right problem, or if instead the run-time linker needed to be  
> fixed.
> Please help: read PR bin/147175 and comment if you're knowledgeable about  
> either run-time linking, KRB5/GSSAPI, or both :)

You need to gather and show exact command that fails.

Shared object that references a symbol but does not record a dependency
on the object providing the symbol is the bug in the build of that object
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
Url :

More information about the freebsd-current mailing list