A workaround is adding to lib/curl_setup.h:

~~~~~~
#if !defined(USE_OPENSSL) || !defined(OPENSSL_NO_DES)
#define USE_NTLM
#endif
~~~~~~

---
** [bugs:#1439] cannot compile curl without NTLM (OpenSSL without DES)**
**Status:** open
**Labels:** openssl des ntlm 
**Created:** Fri Oct 24, 2014 07:29 PM UTC by Mark Kubacki
**Last Updated:** Fri Oct 24, 2014 07:29 PM UTC
**Owner:** nobody
I stumbled upon this while compiling CURL with a stripped-down OpenSSL:

Curl lacks in "curl_ntlm_core.c" (and perhaps other places) detection if OpenSSL has been compiled without DES (and perhaps DSA, or RSA). Such compilations take place on memory-constrained systems, or if the release manager has decided not to include those old ciphers (you don't need DSA in OpenSSL for ECDSA).

For example:
# openssl:
./Configure linux-x86_64 no-des
…

# curl:
./configure --enable-http --with-ssl --without-ntlm --disable-ntlm # I tried!
make
    …
libtool: compile:  x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I../include/curl -I../include -I../include -I../lib -I../lib -DBUILDING_LIBCURL -DCURL_HIDDEN_SYMBOLS -fvisibility=hidden -O2 -Wno-system-headers -pthread -c curl_ntlm_core.c  -fPIC -DPIC -o .libs/libcurl_la-curl_ntlm_core.o
curl_ntlm_core.c:37:29: fatal error: openssl/des.h: No such file or directory
 #    include <openssl/des.h>
                             ^
compilation terminated.
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.