Bug 290924 - ftp/curl: 8.17.0 fails to configure
Summary: ftp/curl: 8.17.0 fails to configure
Status: New
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Po-Chuan Hsieh
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-11-10 07:36 UTC by Mark Evenson
Modified: 2025-11-12 09:21 UTC (History)
11 users (show)

See Also:
bugzilla: maintainer-feedback? (sunpoet)


Attachments
config.log from failing build (130.92 KB, text/plain)
2025-11-10 07:36 UTC, Mark Evenson
no flags Details
<file:///var/db/ports/ftp_curl/options> contents (1.54 KB, text/plain)
2025-11-10 07:37 UTC, Mark Evenson
no flags Details
poudriere build fail log (11.91 KB, text/plain)
2025-11-11 15:00 UTC, Lukas Engelhardt
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Mark Evenson 2025-11-10 07:36:14 UTC
Created attachment 265307 [details]
config.log from failing build

Port update to 8.17.0 fails to configure with same options whereas previous version worked:

[…]
checking for gss.h... no
checking for gssapi/gssapi.h... yes
checking for gssapi/gssapi_generic.h... no
checking for gssapi/gssapi_krb5.h... yes
configure: error: MIT or GNU GSS library required, but not found
===>  Script "configure" failed unexpectedly.

The corresponding options file has:

OPTIONS_FILE_SET+=GSSAPI_BASE
OPTIONS_FILE_UNSET+=GSSAPI_HEIMDAL
OPTIONS_FILE_UNSET+=GSSAPI_MIT
OPTIONS_FILE_UNSET+=GSSAPI_NONE

(will attach options in subsequent post)
Comment 1 Mark Evenson 2025-11-10 07:37:29 UTC
Created attachment 265308 [details]
<file:///var/db/ports/ftp_curl/options> contents

Complete options for failing configuration.
Comment 2 Jordan Ostreff 2025-11-10 16:32:05 UTC
(In reply to Mark Evenson from comment #1)
For me doesn't work also with following build options:

:/usr/ports/ftp/curl # make showconfig
===> The following configuration options are available for curl-8.17.0:
     ALTSVC=on: HTTP Alternative Services support
     COOKIES=on: Cookies support
     CURL_DEBUG=off: cURL debug memory tracking
     DEBUG=off: Build with debugging support
     DOCS=on: Build and/or install documentation
     EXAMPLES=on: Build and/or install examples
     IDN=on: International Domain Names support
     IPV6=on: IPv6 protocol support
     LIBUV=off: Event-based tests
     NTLM=on: NTLM authentication support
     PROXY=on: Proxy support
     PSL=off: Public Suffix List support
     STATIC=on: Build static executables and/or libraries
     TLS_SRP=on: TLS-SRP (Secure Remote Password) support
====> Options available for the group COMPRESSION
     BROTLI=on: Brotli compression support
     ZSTD=off: Zstandard compression support
====> Options available for the group PROTOCOL
     DICT=on: DICT (RFC 2229) support
     FTP=on: FTP protocol support
     GOPHER=on: Gopher protocol support
     HTTP=on: HTTP/HTTPS support
     HTTP2=on: HTTP/2 support (requires HTTP)
     IMAP=on: IMAP/IMAPS support
     IPFS=on: IPFS support
     LDAP=off: LDAP protocol support
     LDAPS=off: LDAP protocol over SSL support (requires GNUTLS/OPENSSL/WOLFSSL)
     LIBSSH=off: SCP/SFTP support via libssh (requires OPENSSL)
     LIBSSH2=off: SCP/SFTP support via libssh2 (requires OPENSSL)
     MQTT=off: MQTT support
     POP3=on: POP3/POP3S support
     RTSP=on: Real Time Streaming Protocol (RTSP) support
     SMB=off: SMB/CIFS support
     SMTP=on: SMTP/SMTPS support
     TELNET=on: Telnet support
     TFTP=on: TFTP support
     WEBSOCKET=off: WebSocket protocol support
====> GSSAPI Security API support: you have to select exactly one of them
     GSSAPI_BASE=on: GSSAPI support via base system (needs Kerberos)
     GSSAPI_MIT=off: GSSAPI support via security/krb5
     GSSAPI_NONE=off: Disable GSSAPI support
====> DNS resolving options: you have to select exactly one of them
     CARES=off: Asynchronous DNS resolution via c-ares
     THREADED_RESOLVER=on: Threaded DNS resolver
====> SSL protocol support: you can only select none or one of them
     GNUTLS=off: SSL/TLS support via GnuTLS
     OPENSSL=on: SSL/TLS support via OpenSSL
     WOLFSSL=off: SSL/TLS support via wolfSSL
===> Use 'make config' to modify these settings
Comment 3 Paavo-Einari Kaipila 2025-11-10 21:40:12 UTC
Upstream has dropped heimdal from configure, but not from code. Patching it should quite trivial.

https://github.com/curl/curl/pull/18928/files

Since this obviously breaks people's existing setups with no prior warning, I think it could be considered a just-fix-it case and not wait for 2 weeks.
Comment 4 Daniel Engberg freebsd_committer freebsd_triage 2025-11-10 21:43:41 UTC
(In reply to Paavo-Einari Kaipila from comment #3)
https://github.com/diizzyy/ports-overlay/blob/main/ftp/curl/Makefile#L47
Something like that works on my end (caution, this isn't the same as the port in tree)
Comment 5 Po-Chuan Hsieh freebsd_committer freebsd_triage 2025-11-11 07:58:03 UTC
If GSSAPI_BASE is enabled, please change it to GSSAPI_NONE (default) or GSSAPI_MIT.

I've also removed GSSAPI_BASE option temporarily.

I plan to readd GSSAPI_BASE for FreeBSD 15+.
Comment 6 Lukas Engelhardt 2025-11-11 15:00:46 UTC
Created attachment 265334 [details]
poudriere build fail log

my build also fails, i am using DISABLE_LICENSES="YES"
I have tried commenting out DISABLE_LICENSES="YES" as well as setting OPTIONS_SET+= GSSAPI_MIT, which does not work either.
Comment 7 Lukas Engelhardt 2025-11-12 09:21:26 UTC
I tried setting these settings via jail-make.conf, but that did not seem to work.
I solved it by running `poudriere options -j 143amd64 ftp/curl` and set GSSAPI_NONE to true there.