I think the recent changes to configure.ac might partially fix this as we have currently disabled NTLM for BoringSSL based builds.

However, curl may report that it is building against BoringSSL instead. Just a theory as I don't personally don't build OpenSSL on configure based systems so can't really test.

Daniel: I meant to discuss this with you in person over the weekend and with our busy schedule I unfortunately forgot :( Is it possible to detect OPENSSL_NO_DES in configure.ac and set a new HAVE_DES pre-processor variable set accordingly? I appreciate this won't fix the issue under Windows but then someone who needs that could override HAVE_DES in config-win32.h or similar.

---
** [bugs:#1439] cannot compile curl with OpenSSL lacking DES support**
**Status:** open
**Labels:** openssl des ntlm 
**Created:** Fri Oct 24, 2014 07:29 PM UTC by Mark Kubacki
**Last Updated:** Wed Dec 31, 2014 03:39 PM UTC
**Owner:** Daniel Stenberg
I stumbled upon this while compiling CURL with a stripped-down OpenSSL:

Curl lacks in "curl_ntlm_core.c" (and perhaps other places) detection if OpenSSL has been compiled without DES (and perhaps DSA, or RSA). Such compilations take place on memory-constrained systems, or if the release manager has decided not to include those old ciphers (you don't need DSA in OpenSSL for ECDSA).

For example:
# openssl:
./Configure linux-x86_64 no-des
…

# curl:
./configure --enable-http --with-ssl --without-ntlm --disable-ntlm # I tried!
make
    …
libtool: compile:  x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I../include/curl -I../include -I../include -I../lib -I../lib -DBUILDING_LIBCURL -DCURL_HIDDEN_SYMBOLS -fvisibility=hidden -O2 -Wno-system-headers -pthread -c curl_ntlm_core.c  -fPIC -DPIC -o .libs/libcurl_la-curl_ntlm_core.o
curl_ntlm_core.c:37:29: fatal error: openssl/des.h: No such file or directory
 #    include <openssl/des.h>
                             ^
compilation terminated.
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.