Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 03 May 2010 07:38:41 -0600
From:      Stacy Millions <stacy@Millions.Ca>
To:        freebsd-ports@freebsd.org
Subject:   Re: MD2 Dependency in FreeBSD 8.0 - OpenSSL 1.0.0 Needs MD2 enabled
Message-ID:  <4BDED1E1.1060108@millions.ca>
In-Reply-To: <20100503045136.GA1357@rwpc12.mby.riverwillow.net.au>
References:  <20100503045136.GA1357@rwpc12.mby.riverwillow.net.au>

next in thread | previous in thread | raw e-mail | index | archive | help
John Marshall wrote:
> This is obviously a workaround but...
> 
> After updating ports (including security/openssl) on a FreeBSD 8-STABLE
> (Feb 25) system, I couldn't build net/samba33.  This is what I saw...
> 
>   Linking bin/smbd
>   /usr/lib/libhx509.so: undefined reference to `MD2_Init'
>   /usr/lib/libhx509.so: undefined reference to `MD2_Final'
>   /usr/lib/libhx509.so: undefined reference to `MD2_Update'
>   gmake: *** [bin/smbd] Error 1
>   *** Error code 1
> 
> OpenSSL 1.0.0 does not include MD2 by default but does include a knob:
> 
>   MD2     "Build with MD2 hash (obsolete)" off
> 
> If I re-build OpenSSL 1.0.0 with the "obsolete" MD2, then samba builds
> happily.
> 
> Is there a better workaround until such time as the base system Heimdal
> is updated?
> 

I have been playing with porting heimdal 1.3.2 for a couple days now; as 
far as I can tell, MD2 is not optional for heimdal. I see three options
- build openssl 1.0.0 with MD2
- build heimdal with hcrypto (it won't use openssl then)
- patch heimdal to remove MD2 support

The first is the easiest and the way I have been testing the port, but I 
might take a look at adding a knob to enable hcrypto. Removing MD2 would 
require more effort than I am willing to spend at the moment.

-stacy



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4BDED1E1.1060108>