kerberos5 @1.19.2: Undefined symbols _EVP_MD_CTX_destroy _EVP_MD_size _HMAC_CTX_cleanup _HMAC_CTX_init _EVP_MD_CTX_create

[JR1994]

kerberos5 is failing to build on 10.4.11 with the following error

df2.so openssl/sha256.so openssl/stubs.so -L../../lib -lkrb5support -lcrypto -lintl -lresolv -Wl,-headerpad_max_install_names -arch ppc -Wl,-search_paths_first
:info:build Undefined symbols:
:info:build   "_EVP_MD_CTX_destroy", referenced from:
:info:build       _hash_evp in hash_evp.so
:info:build       _hash_evp in hash_evp.so
:info:build       _k5_sha256 in sha256.so
:info:build       _k5_sha256 in sha256.so
:info:build   "_EVP_MD_size", referenced from:
:info:build       _hash_evp in hash_evp.so
:info:build   "_HMAC_CTX_cleanup", referenced from:
:info:build       _krb5int_hmac_keyblock in hmac.so
:info:build       _krb5int_hmac_keyblock in hmac.so
:info:build   "_HMAC_CTX_init", referenced from:
:info:build       _krb5int_hmac_keyblock in hmac.so
:info:build   "_EVP_MD_CTX_create", referenced from:
:info:build       _hash_evp in hash_evp.so
:info:build       _k5_sha256 in sha256.so
:info:build ld: symbol(s) not found
:info:build collect2: ld returned 1 exit status
:info:build make[2]: *** [libk5crypto.3.1.dylib] Error 1
:info:build make[2]: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_kerberos5/kerberos5/work/krb5-1.19.2/src/lib/crypto'
:info:build make[1]: *** [all-recurse] Error 1
:info:build make[1]: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_kerberos5/kerberos5/work/krb5-1.19.2/src/lib'
:info:build make: *** [all-recurse] Error 1
:info:build make: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_kerberos5/kerberos5/work/krb5-1.19.2/src'
:info:build Command failed:  cd "/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_kerberos5/kerberos5/work/krb5-1.19.2/src" && /usr/bin/make -j2 -w all 
:info:build Exit code: 2
:error:build Failed to build kerberos5: command execution failed

I understand that Tiger is extremely old any help will be appreciated.

[evanmiller (Evan Miller)]

What version of openssl do you have installed? port installed openssl

[ryandesign (Ryan Carsten Schmidt)]

Please attach the complete main.log file.

[JR1994]

Here is the version of openssl that I am running and I am attaching the full log as well.

herminio-hernandezs-power-mac-g5:~/Documents herminiohernandez$ port installed openssl
The following ports are currently installed:
  openssl @3_2 (active)

[evanmiller (Evan Miller)]

The best that I can tell is there is some kind of mismatch between the OpenSSL headers and the OpenSSL dynamic library. For whatever reason, it appears to be finding OpenSSL 1.1 headers but linking to the OpenSSL 3.0 library. Maybe others have seen a similar issue with other ports?

[evanmiller (Evan Miller)]

This ticket might be relevant, at least inasmuch as it has to do with linking and incorrect libraries being found with kerberos5: ​https://trac.macports.org/ticket/63328

[JR1994]

The link was helpful. I was to complete a build by doing the following

ports/net/kerberos5/work/krb5-1.19.2/src root#LDFLAGS=-L/opt/local/lib ./configure
ports/net/kerberos5/work/krb5-1.19.2/src root#make

Any way we can set it up so that I can build using macports? Does the Portfile need editing?

[JR1994]

I found the issue. This was in the Portfile

# kerberos5 fails to build in its own presence, see #23769, #37944
# remove ${prefix}/lib from configure.ldflags to allow linking against its own libs first
# adding ${worksrcpath}/lib is not necessary and pollutes krb5-config --libs and pkg-config files
configure.ldflags-delete    -L${prefix}/lib
configure.python            ${prefix}/bin/python3.9
configure.args              --with-system-et \
                            --without-system-db \

commented out the 'confure.ldflags-delete' and the port built.

[jerryyhom]

Is the following line still necessary?

configure.ldflags-delete -L${prefix}/lib

In comment 7, the reporter commented out that line and built successfully with openssl. I also commented out that line and compiled kerberos5 v1.20.1; I have libressl installed.