cURL / Mailing Lists / curl-library / Single Mail

curl-library

RE: libcurl links to openssl libraries twice

From: Alona Rossen <arossen_at_opentext.com>
Date: Fri, 13 Jun 2014 12:40:19 +0000

My question was if ldap is involved in the following protocols:
BASIC
DIGEST
GSS_Negotiate
NTLM
Digest_IE
IFIS_Delegation

I have re-compiled libcurl without ldap. However, we cannot lose functionality.

Regards,
Alona

-----Original Message-----
From: Kamil Dudka [mailto:kdudka_at_redhat.com]
Sent: June 13, 2014 1:59 AM
To: Alona Rossen
Cc: curl-library_at_cool.haxx.se
Subject: Re: libcurl links to openssl libraries twice

On Thursday, June 12, 2014 18:56:31 Alona Rossen wrote:
> We build libcurl 7.21.0. We cannot upgrade libcurl at the moment.
>
> I have figured out that dependency on libssl.so.6 and libcrypto.so.6
> was coming from ldap library.
>
> $ ./configure LDFLAGS=-m64 -fPIC -Xlinker --export-dynamic -Xlinker
> --hash-style=sysv LDFLAGS=-m64 LIBS=-ldl
> --with-ssl=/home/sambuild/INSTALL/ssl-1.0.0m_64
> --prefix=/home/sambuild/INSTALL/curl72-ssl-1.0.0m_64
>
>
> The issue is solved by eliminating ldap from libcurl dependencies.
> $ ./configure LDFLAGS=-m64 -fPIC -Xlinker --export-dynamic -Xlinker
> --hash-style=sysv LDFLAGS=-m64 LIBS=-ldl --disable-ldap
> --with-ssl=/home/sambuild/INSTALL/ssl-1.0.0m_64
> --prefix=/home/sambuild/INSTALL/curl72-ssl-1.0.0m_64
>
>
> How libcurl uses ldap? I want to make sure that functionality we are
> interested in is not affected.
>
>
> Thank you,
> Alona

You can either recompile your ldap library to use the new version of OpenSSL, or recompile libcurl such that it does not use ldap at all.

Kamil

> -----Original Message-----
> From: curl-library [mailto:curl-library-bounces_at_cool.haxx.se] On
> Behalf Of Fabian Frank Sent: June 12, 2014 12:52 PM
> To: libcurl development
> Subject: Re: libcurl links to openssl libraries twice
>
> On Jun 12, 2014, at 8:56 AM, Alona Rossen <arossen_at_opentext.com> wrote:
> > I rebuild libcurl with openssl1.0.0m in view of recent openssl
> > security vulnerability announcement.\
> You should share the commands that you used to build (configure,
> makeā€¦) as well as the config.log, most likely this is caused by the
> settings you pass when building the app. Also, which version of curl you are trying to build.
>
> Regards,
> Fabian
>
>
>
> -------------------------------------------------------------------
> List admin: http://cool.haxx.se/list/listinfo/curl-library
> Etiquette: http://curl.haxx.se/mail/etiquette.html
>
> -------------------------------------------------------------------
> List admin: http://cool.haxx.se/list/listinfo/curl-library
> Etiquette: http://curl.haxx.se/mail/etiquette.html

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette: http://curl.haxx.se/mail/etiquette.html
Received on 2014-06-13