Search Mailing List Archives

Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

Webauth-3.7.4 on Linux links to wrong OpenSSL libraries

Russ Allbery eagle at
Thu Jul 28 17:11:22 PDT 2011

Russ Allbery <eagle at> writes:
> lanz at pangea2.Stanford.EDU (Kai Lanz) writes:

>> CURL_LIBS = -L/usr/lib64 -lcurl -L/usr/kerberos/lib -L/usr/kerberos/lib64 -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto -lresolv -ldl -lz -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lresolv -L/usr/kerberos/lib -L/usr/kerberos/lib64 -lidn -lssl -lcrypto -lssl -lcrypto -lgssapi_krb5 -lkrb5 -lcom_err -lk5crypto -lresolv -ldl -lz -lz

> Yup.  And that's because curl-config --libs is returning the -L flag for
> the system library directory into which it's installed.  This is a bug in
> curl-config -- it shouldn't include an -L flag for the system library
> directory -- but it's probably going to be hard to get it fixed.

> You can force configure to not use curl-config by running:

>     ./configure CURL_CONFIG=/nonexistent --with-openssl-lib=/usr/local/ssl/lib --with-openssl-include=/usr/local/ssl/include/openssl --with-apxs=/usr/local/apache/bin/apxs

> which will probably fix the problem, since the compiler can find cURL by
> itself without needing curl-config, since it's installed in the default
> system library search path.

Although, actually, it occurs to me that this is still going to be a
problem, since it looks from the above like cURL is linked with your old
version of libcrypto.  So you're still going to have a binary that's
linked against both versions.

Russ Allbery <eagle at>
Technical Lead, ITS Infrastructure Delivery Group, Stanford University

More information about the webauth-info mailing list