Bugs item #3071038, was opened at 2010-09-19 10:15
Message generated for change (Settings changed) made by bagder
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=3071038&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: compile or build problem
Group: bad behaviour
>Status: Closed
Resolution: Later
Priority: 5
Private: No
Submitted By: Michał Górny ()
Assigned to: Daniel Stenberg (bagder)
Summary: curl fails to link against gnutls-2.11.1 using libnettle

Initial Comment:
By default, gnutls-2.11.1 uses libnettle instead of libgcrypt as a default crypto backend. If built in that configuration, it is no longer linked against libgcrypt.

curl however, when built with gnutls support, uses libgcrypt functions without linking in libgcrypt explicitly. Thus, with this new version of gnutls, it fails to build due to unresolved symbols 'gcry_*'.

The solution is to either drop dependency on libgcrypt functions completely or to depend on it explicitly, linking against it as well. In the latter case, it might be useful to separate the gcrypt dependency from gnutls in the configure options.

I'm attaching a build log for curl-7.21.1. I was able to reproduce the issue with today's git too.

http://bugs.gentoo.org/show_bug.cgi?id=337506

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2010-09-20 23:59

Message:
Thanks for the report. I've now committed and pushed a fixed that makes
configure check for and use gcrypt separately and fail if not found as our
code for GnuTLS currently assumes gcrypt.

I've added a mention to our TODO about making the GnuTLS code agnostic of
crypto layer.

----------------------------------------------------------------------

Comment By: Daniel Stenberg (bagder)
Date: 2010-09-20 00:01

Message:
Indeed. If GnuTLS has been selected by configure, it should also detect and
use gcrypt or bail out. Right now the curl code assumes gcrypt is present
with GnuTLS is, so we should make sure it is.

Of course, in the longer run we could consider to detect which crypto lib
it uses and use that.

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=3071038&group_id=976
Received on 2010-09-28