I wouldn't be hard to do, no.

But: OpenSSL has an API and we already fight pretty hard to use it and to adjust to its changes over time. I do not think we need to add to our work load to also support when using deliberately _break_ the API.

I am thus -1 on supporting this build-time option in OpenSSL. I don't want to spend any of my time on it.

---
** [bugs:#1439] cannot compile curl with OpenSSL lacking DES support**
**Status:** open
**Labels:** openssl des ntlm 
**Created:** Fri Oct 24, 2014 07:29 PM UTC by Mark Kubacki
**Last Updated:** Mon Feb 02, 2015 01:19 PM UTC
**Owner:** Daniel Stenberg
I stumbled upon this while compiling CURL with a stripped-down OpenSSL:

Curl lacks in "curl_ntlm_core.c" (and perhaps other places) detection if OpenSSL has been compiled without DES (and perhaps DSA, or RSA). Such compilations take place on memory-constrained systems, or if the release manager has decided not to include those old ciphers (you don't need DSA in OpenSSL for ECDSA).

For example:
# openssl:
./Configure linux-x86_64 no-des
…

# curl:
./configure --enable-http --with-ssl --without-ntlm --disable-ntlm # I tried!
make
    …
libtool: compile:  x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I../include/curl -I../include -I../include -I../lib -I../lib -DBUILDING_LIBCURL -DCURL_HIDDEN_SYMBOLS -fvisibility=hidden -O2 -Wno-system-headers -pthread -c curl_ntlm_core.c  -fPIC -DPIC -o .libs/libcurl_la-curl_ntlm_core.o
curl_ntlm_core.c:37:29: fatal error: openssl/des.h: No such file or directory
 #    include <openssl/des.h>
                             ^
compilation terminated.
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.