[Bug 168] New: "Could not find working OpenSSL library"

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=168

           Summary: "Could not find working OpenSSL library"
           Product: Portable OpenSSH
           Version: older versions
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: minor
          Priority: P1
         Component: Build system
        AssignedTo: openssh-unix-dev at mindrot.org
        ReportedBy: dtaylor at ejasent.com


On Solaris 2.7 sparc, with OpenSSL installed in /usr/local/ssl, "configure
--with-ssl-dir=/usr/local/ssl" fails with error "Could not find working OpenSSL
library, please install or check config.log"

config.log contains:
------------------------------------------------------------------
configure:4605: gcc -o conftest -g -O2 -Wall  -I/usr/local/include -I/opt 
-L/usr/local/lib -R/usr/local/lib -L/opt -R/opt conftest.c -lz -lsocket -lnsl 
-lgen  -lcrypto 1>&5
configure:4594: openssl/rand.h: No such file or directory
configure: failed program was:
#line 4591 "configure"
#include "confdefs.h"

#include <string.h>
#include <openssl/rand.h>
------------------------------------------------------------------

The problem seems to result from this loop:
------------------------------------------------------------------
       for ssldir in $tryssldir "" /usr/local/openssl /usr/lib/openssl
/usr/local/ssl /usr/lib/ssl /usr/local /usr/pkg /opt /opt/openssl ; do
<snip>
                       # Try to use $ssldir/include if it exists, otherwise 
                        # $ssldir
                        if test -d "$ssldir/include" ; then
                                CPPFLAGS="$saved_CPPFLAGS -I$ssldir/include"
------------------------------------------------------------------

Since "saved_CPPFLAGS" (which is set to /usr/local/include) is never updated,
this loop merely appends the last existing directory (which is /opt on my
system) to CPPFLAGS.  Seems it should either append *all* existing include
directories from the "for" list", or only use the directory passed with the
"--with-ssl-dir" option.

An easy workaround is to remove all but "/usr/local/ssl" from the "for" list.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.