Linking against libssl

[Andrew Pollock]

Hi,

It's just come to my attention that DHCP 4.1.1-P1 is linking against
libcrypto, which is in /usr on Debian systems, which causes problems with
systems that want to mount /usr via NFS.

I have noticed the build process complaining about useless linking with
libssl.

It appears that this happens (unconditionally?) in the configure script:

	checking for library containing MD5_Init... -lcrypto
	checking for library containing MD5Init... no

which adds -lcrypto to the CFLAGS for everything. This produces some
warnings from the build process at the end:

dpkg-shlibdeps: warning: dependency on libcrypto.so.0.9.8 could be avoided
if "debian/isc-dhcp-server/usr/sbin/dhcpd" were not uselessly linked against
it (they use none of its symbols).
dpkg-shlibdeps: warning: dependency on libcrypto.so.0.9.8 could be avoided
if "debian/isc-dhcp-common/usr/bin/omshell" were not uselessly linked
against it (they use none of its symbols).
dpkg-shlibdeps: warning: dependency on libcrypto.so.0.9.8 could be avoided
if "debian/isc-dhcp-client/sbin/dhclient" were not uselessly linked against
it (they use none of its symbols).
dpkg-shlibdeps: warning: dependency on libcrypto.so.0.9.8 could be avoided
if "debian/isc-dhcp-client-udeb/sbin/dhclient" were not uselessly linked
against it (they use none of its symbols).
dpkg-shlibdeps: warning: dependency on libcrypto.so.0.9.8 could be avoided
if "debian/isc-dhcp-relay/usr/sbin/dhcrelay" were not uselessly linked
against it (they use none of its symbols).

(I'm looking at
https://buildd.debian.org/fetch.cgi?pkg=isc-dhcp;ver=4.1.1-P1-9;arch=amd64;stamp=1279996807
if you want to look at the whole build log)

Is there some magical undocumented flag I can pass configure to get it to
not do this? Why isn't the supplied MD5 code (dst/md5.h and friends) sufficient?

There's similar problem with linkage to zlib.

This is currently a release critical issue for Debian (see
http://bugs.debian.org/592361)

regards

Andrew
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 827 bytes
Desc: Digital signature
URL: <https://lists.isc.org/pipermail/dhcp-hackers/attachments/20100821/fed82c1b/attachment.bin>