content-type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-RT-Original-Encoding: utf-8 Content-Length: 19949 The same issue of include order also occurs with bind 9.11.1-P3, here is patch for the makefiles for that version: diff -ruN bind-9.11.1-P3/bin/delv/Makefile.in bind-9.11.1-P3.fixed/bin/delv/Makefile.in --- bind-9.11.1-P3/bin/delv/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/bin/delv/Makefile.in 2017-07-19 11:03:19.000000000 +0100 @@ -13,7 +13,7 @@ @BIND9_MAKE_INCLUDES@ CINCLUDES = -I${srcdir}/include ${DNS_INCLUDES} ${ISC_INCLUDES} \ - @DST_OPENSSL_INC@ ${IRS_INCLUDES} ${ISCCFG_INCLUDES} + ${IRS_INCLUDES} ${ISCCFG_INCLUDES} @DST_OPENSSL_INC@ CDEFINES = @CRYPTO@ -DVERSION=\"${VERSION}\" \ -DSYSCONFDIR=\"${sysconfdir}\" diff -ruN bind-9.11.1-P3/bin/dig/Makefile.in bind-9.11.1-P3.fixed/bin/dig/Makefile.in --- bind-9.11.1-P3/bin/dig/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/bin/dig/Makefile.in 2017-07-19 11:03:08.000000000 +0100 @@ -15,8 +15,8 @@ READLINE_LIB = @READLINE_LIB@ CINCLUDES = -I${srcdir}/include ${DNS_INCLUDES} ${BIND9_INCLUDES} \ - ${ISC_INCLUDES} @DST_OPENSSL_INC@ \ - ${LWRES_INCLUDES} ${ISCCFG_INCLUDES} + ${ISC_INCLUDES} \ + ${LWRES_INCLUDES} ${ISCCFG_INCLUDES} @DST_OPENSSL_INC@ CDEFINES = -DVERSION=\"${VERSION}\" @CRYPTO@ CWARNINGS = diff -ruN bind-9.11.1-P3/bin/nsupdate/Makefile.in bind-9.11.1-P3.fixed/bin/nsupdate/Makefile.in --- bind-9.11.1-P3/bin/nsupdate/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/bin/nsupdate/Makefile.in 2017-07-19 11:02:57.000000000 +0100 @@ -19,8 +19,8 @@ DST_GSSAPI_INC = @DST_GSSAPI_INC@ CINCLUDES = ${LWRES_INCLUDES} ${DNS_INCLUDES} \ - ${BIND9_INCLUDES} @DST_OPENSSL_INC@ ${ISC_INCLUDES} \ - ${ISCCFG_INCLUDES} ${DST_GSSAPI_INC} + ${BIND9_INCLUDES} ${ISC_INCLUDES} \ + ${ISCCFG_INCLUDES} ${DST_GSSAPI_INC} @DST_OPENSSL_INC@ CDEFINES = -DVERSION=\"${VERSION}\" @CRYPTO@ @USE_GSSAPI@ CWARNINGS = diff -ruN bind-9.11.1-P3/bin/tests/Makefile.in bind-9.11.1-P3.fixed/bin/tests/Makefile.in --- bind-9.11.1-P3/bin/tests/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/bin/tests/Makefile.in 2017-07-19 11:02:44.000000000 +0100 @@ -10,8 +10,8 @@ @BIND9_MAKE_INCLUDES@ -CINCLUDES = ${DNS_INCLUDES} ${ISC_INCLUDES} @DST_OPENSSL_INC@ \ - ${ISCCFG_INCLUDES} ${LWRES_INCLUDES} ${OMAPI_INCLUDES} +CINCLUDES = ${DNS_INCLUDES} ${ISC_INCLUDES} \ + ${ISCCFG_INCLUDES} ${LWRES_INCLUDES} ${OMAPI_INCLUDES} @DST_OPENSSL_INC@ CDEFINES = @CRYPTO@ CWARNINGS = diff -ruN bind-9.11.1-P3/bin/tools/Makefile.in bind-9.11.1-P3.fixed/bin/tools/Makefile.in --- bind-9.11.1-P3/bin/tools/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/bin/tools/Makefile.in 2017-07-19 11:02:35.000000000 +0100 @@ -12,9 +12,9 @@ @BIND9_MAKE_INCLUDES@ -CINCLUDES = ${DNS_INCLUDES} ${ISC_INCLUDES} @DST_OPENSSL_INC@ \ +CINCLUDES = ${DNS_INCLUDES} ${ISC_INCLUDES} \ ${ISCCFG_INCLUDES} ${LWRES_INCLUDES} \ - ${OMAPI_INCLUDES} ${BIND9_INCLUDES} + ${OMAPI_INCLUDES} ${BIND9_INCLUDES} @DST_OPENSSL_INC@ CDEFINES = @CRYPTO@ -DVERSION=\"${VERSION}\" CWARNINGS = diff -ruN bind-9.11.1-P3/lib/bind9/Makefile.in bind-9.11.1-P3.fixed/lib/bind9/Makefile.in --- bind-9.11.1-P3/lib/bind9/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/lib/bind9/Makefile.in 2017-07-19 11:02:25.000000000 +0100 @@ -17,7 +17,7 @@ @BIND9_MAKE_INCLUDES@ CINCLUDES = -I. ${BIND9_INCLUDES} ${DNS_INCLUDES} ${ISC_INCLUDES} \ - @ISC_OPENSSL_INC@ ${ISCCFG_INCLUDES} + ${ISCCFG_INCLUDES} @ISC_OPENSSL_INC@ CDEFINES = @CRYPTO@ CWARNINGS = diff -ruN bind-9.11.1-P3/lib/irs/Makefile.in bind-9.11.1-P3.fixed/lib/irs/Makefile.in --- bind-9.11.1-P3/lib/irs/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/lib/irs/Makefile.in 2017-07-19 11:02:15.000000000 +0100 @@ -18,7 +18,7 @@ CINCLUDES = -I. -I./include -I${srcdir}/include \ ${DNS_INCLUDES} ${ISC_INCLUDES} \ - @ISC_OPENSSL_INC@ ${ISCCFG_INCLUDES} + ${ISCCFG_INCLUDES} @ISC_OPENSSL_INC@ CDEFINES = @CRYPTO@ CWARNINGS = diff -ruN bind-9.11.1-P3/lib/isc/Makefile.in bind-9.11.1-P3.fixed/lib/isc/Makefile.in --- bind-9.11.1-P3/lib/isc/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/lib/isc/Makefile.in 2017-07-19 11:02:02.000000000 +0100 @@ -20,7 +20,7 @@ -I${srcdir}/@ISC_THREAD_DIR@/include \ -I${srcdir}/@ISC_ARCH_DIR@/include \ -I./include \ - -I${srcdir}/include @ISC_OPENSSL_INC@ ${DNS_INCLUDES} + -I${srcdir}/include ${DNS_INCLUDES} @ISC_OPENSSL_INC@ CDEFINES = @CRYPTO@ -DPK11_LIB_LOCATION=\"${PROVIDER}\" CWARNINGS = diff -ruN bind-9.11.1-P3/lib/isc/unix/Makefile.in bind-9.11.1-P3.fixed/lib/isc/unix/Makefile.in --- bind-9.11.1-P3/lib/isc/unix/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/lib/isc/unix/Makefile.in 2017-07-19 11:01:48.000000000 +0100 @@ -11,8 +11,8 @@ CINCLUDES = -I${srcdir}/include \ -I${srcdir}/../@ISC_THREAD_DIR@/include \ -I../include \ - -I${srcdir}/../include @ISC_OPENSSL_INC@ \ - -I${srcdir}/.. + -I${srcdir}/../include \ + -I${srcdir}/.. @ISC_OPENSSL_INC@ CDEFINES = @CRYPTO@ CWARNINGS = diff -ruN bind-9.11.1-P3/lib/samples/Makefile.in bind-9.11.1-P3.fixed/lib/samples/Makefile.in --- bind-9.11.1-P3/lib/samples/Makefile.in 2017-07-07 16:01:52.000000000 +0100 +++ bind-9.11.1-P3.fixed/lib/samples/Makefile.in 2017-07-19 11:01:35.000000000 +0100 @@ -14,8 +14,8 @@ CINCLUDES = -I${srcdir}/include -I../dns/include \ ${DNS_INCLUDES} ${ISC_INCLUDES} \ - @ISC_OPENSSL_INC@ -I${top_srcdir}/lib/irs/include \ - -I../../lib/irs/include + -I${top_srcdir}/lib/irs/include \ + -I../../lib/irs/include @ISC_OPENSSL_INC@ CDEFINES = @CRYPTO@ -DVERSION=\"${VERSION}\" \ -DSYSCONFDIR=\"${sysconfdir}\" > On 19 Jul 2017, at 10:35, BIND9 Bugs via RT wrote: > > Greetings, > > This message was automatically generated to acknowledge receipt of > your recent email > "BIND 9.10.5-P3 - bind does not build from source", > and to let you know that we have opened a ticket for your request > (a summary of which appears below.) > > We do not need a further response from you at this time, but if you > do respond, please include in the Subject of your reply the ID > '[ISC-Bugs #45581]' > so that we can match up your reply with the ticket in our system. > > > What Happens Next > ================= > > Bug reports submitted to us in this manner are handled based on > perceived severity in relation to other bugs. We handle reports as > time permits so there is no guaranteed response time for these > reports. > > If you feel the issue you are reporting is a security issue, please > see http://www.isc.org/security/reporting-issues for details on how > to report it, including the PGP key you may use. > > If it is of a non-security yet still urgent matter, you may reply > to this message to add further information. > > > Public Visibility of Bugs > ========================= > > Starting July 7, 2017, ISC will allowing partial read-only visibility > of select tickets in our database at https://bugs.isc.org > > Tickets created by submission to bind-suggest@isc.org and > dhcp-suggest@isc.org will be marked as feature requests and immediately > included among those tickets that are publicly visible. > > Tickets created by submission to bind9-bugs@isc.org and > dhcp-bugs@isc.org will not automatically be made publicly visible, but > will be made visible to the public when they are triaged by ISC staff > if there is no explicit confidentiality request and the issue does not > appear to be a security concern. > > Tickets created through bind9-confidential@isc.org and > dhcp-confidential@isc.org will be flagged as confidential and not be > made visible to the public without explicit direction otherwise from the > original submitter. > > If this is not what you desire for your ticket you may reply to this > email and request that we change the treatment of your ticket. > > > Other Support Options > ===================== > > If your organization requires more immediate attention, ISC offers > paid support options. Please see http://www.isc.org/services/support > for more information. > > If paid support is not an option, please consider making a donation > to ISC. We don't require a donation -- we will work on your report > just as quickly whether or not you can donate -- but we always need > and welcome community support. See http://www.isc.org/supportisc > > > Run a Supported Version > ======================= > > If you are not running a supported version of our software, please > upgrade. Bug reports against unsupported versions of BIND are > discouraged, as your issue may have already been addressed. > > You can find the latest versions of our software here: > > https://www.isc.org/downloads/ > > > For configuration help... > ========================= > > Questions regarding configuration or setup are addressed on mailing > lists - to subscribe, visit: > > https://lists.isc.org/mailman/listinfo/bind-users > or https://lists.isc.org/mailman/listinfo/dhcp-users > > > Thank you, > bind9-confidential@isc.org > > --------------------------------------------------------------------- > > Bug Report from www.isc.org: > > Name: David Salt > Email: dgsalt@me.com > Software Version: BIND 9.10.5-P3 > OS: Mac OS 10.12.5 > Subject:bind does not build from source > > > Bug Detail > =========== > If a version of bind has previously been installed in /usr/local and a version of openssl is present in /usr/local, then a clean build fails with: > > making all in /Users/salty/projects/bind/bind-9.10.5-P3/bin/nsupdate > gcc -I/Users/salty/projects/bind/bind-9.10.5-P3 -I../.. -I/Users/salty/projects/bind/bind-9.10.5-P3/lib/lwres/include -I../../lib/lwres/unix/include -I../../lib/lwres/include -I/Users/salty/projects/bind/bind-9.10.5-P3/lib/dns/include -I../../lib/dns/include -I/Users/salty/projects/bind/bind-9.10.5-P3/lib/bind9/include -I../../lib/bind9/include -I/usr/local/include -I/Users/salty/projects/bind/bind-9.10.5-P3/lib/isc/include -I../../lib/isc -I../../lib/isc/include -I../../lib/isc/unix/include -I../../lib/isc/pthreads/include -I../../lib/isc/x86_32/include -I/Users/salty/projects/bind/bind-9.10.5-P3/lib/isccfg/include -I../../lib/isccfg/include -D_REENTRANT -DVERSION=\"9.10.5-P3\" -DOPENSSL -DGSSAPI -D__APPLE_USE_RFC_3542 -g -O2 -I/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/usr/include/libxml2 -W -Wall -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith -fno-strict-aliasing \ > -DSESSION_KEYFILE=\"/var/run/named/session.key\" \ > -c ./nsupdate.c > In file included from ./nsupdate.c:57: > /Users/salty/projects/bind/bind-9.10.5-P3/lib/dns/include/dns/dispatch.h:573:44: error: unknown type name 'isc_dscp_t' > dns_dispatch_setdscp(dns_dispatch_t *disp, isc_dscp_t dscp); > ^ > /Users/salty/projects/bind/bind-9.10.5-P3/lib/dns/include/dns/dispatch.h:574:1: error: unknown type name 'isc_dscp_t' > isc_dscp_t > ^ > In file included from ./nsupdate.c:72: > /Users/salty/projects/bind/bind-9.10.5-P3/lib/dns/include/dns/request.h:230:10: error: unknown type name 'isc_dscp_t' > isc_dscp_t dscp, unsigned int options, > ^ > /Users/salty/projects/bind/bind-9.10.5-P3/lib/dns/include/dns/request.h:297:10: error: unknown type name 'isc_dscp_t' > isc_dscp_t dscp, unsigned int options, > ^ > ./nsupdate.c:2674:7: warning: 'krb5_init_context' is deprecated: use GSS.framework [-Wdeprecated-declarations] > rc = krb5_init_context(&ctx); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1450:31: note: > 'krb5_init_context' has been explicitly marked deprecated here > krb5_error_code KRB5_CALLCONV krb5_init_context > ^ > ./nsupdate.c:2678:7: warning: 'krb5_cc_default' is deprecated: use GSS.framework [-Wdeprecated-declarations] > rc = krb5_cc_default(ctx, &ccache); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1734:31: note: > 'krb5_cc_default' has been explicitly marked deprecated here > krb5_error_code KRB5_CALLCONV krb5_cc_default > ^ > ./nsupdate.c:2680:3: warning: 'krb5_free_context' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_free_context(ctx); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1454:20: note: > 'krb5_free_context' has been explicitly marked deprecated here > void KRB5_CALLCONV krb5_free_context > ^ > ./nsupdate.c:2684:7: warning: 'krb5_cc_get_principal' is deprecated: use GSS.framework [-Wdeprecated-declarations] > rc = krb5_cc_get_principal(ctx, ccache, &princ); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1309:1: note: > 'krb5_cc_get_principal' has been explicitly marked deprecated here > krb5_cc_get_principal (krb5_context context, krb5_ccache cache, > ^ > ./nsupdate.c:2686:3: warning: 'krb5_cc_close' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_cc_close(ctx, ccache); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1297:1: note: > 'krb5_cc_close' has been explicitly marked deprecated here > krb5_cc_close (krb5_context context, krb5_ccache cache) KERBEROS_APPLE_DEPRECATED("use GSS.framework"); > ^ > ./nsupdate.c:2687:3: warning: 'krb5_free_context' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_free_context(ctx); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1454:20: note: > 'krb5_free_context' has been explicitly marked deprecated here > void KRB5_CALLCONV krb5_free_context > ^ > ./nsupdate.c:2691:7: warning: 'krb5_unparse_name' is deprecated: use GSS.framework [-Wdeprecated-declarations] > rc = krb5_unparse_name(ctx, princ, &name); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1559:31: note: > 'krb5_unparse_name' has been explicitly marked deprecated here > krb5_error_code KRB5_CALLCONV krb5_unparse_name > ^ > ./nsupdate.c:2693:3: warning: 'krb5_free_principal' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_free_principal(ctx, princ); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1758:20: note: > 'krb5_free_principal' has been explicitly marked deprecated here > void KRB5_CALLCONV krb5_free_principal > ^ > ./nsupdate.c:2694:3: warning: 'krb5_cc_close' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_cc_close(ctx, ccache); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1297:1: note: > 'krb5_cc_close' has been explicitly marked deprecated here > krb5_cc_close (krb5_context context, krb5_ccache cache) KERBEROS_APPLE_DEPRECATED("use GSS.framework"); > ^ > ./nsupdate.c:2695:3: warning: 'krb5_free_context' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_free_context(ctx); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1454:20: note: > 'krb5_free_context' has been explicitly marked deprecated here > void KRB5_CALLCONV krb5_free_context > ^ > ./nsupdate.c:2705:2: warning: 'krb5_free_principal' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_free_principal(ctx, princ); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1758:20: note: > 'krb5_free_principal' has been explicitly marked deprecated here > void KRB5_CALLCONV krb5_free_principal > ^ > ./nsupdate.c:2706:2: warning: 'krb5_cc_close' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_cc_close(ctx, ccache); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1297:1: note: > 'krb5_cc_close' has been explicitly marked deprecated here > krb5_cc_close (krb5_context context, krb5_ccache cache) KERBEROS_APPLE_DEPRECATED("use GSS.framework"); > ^ > ./nsupdate.c:2707:2: warning: 'krb5_free_context' is deprecated: use GSS.framework [-Wdeprecated-declarations] > krb5_free_context(ctx); > ^ > /Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX10.12.sdk/System/Library/Frameworks/Kerberos.framework/Headers/krb5.h:1454:20: note: > 'krb5_free_context' has been explicitly marked deprecated here > void KRB5_CALLCONV krb5_free_context > ^ > 13 warnings and 4 errors generated. > make[2]: *** [nsupdate.o] Error 1 > make[1]: *** [subdirs] Error 1 > make: *** [subdirs] Error 1 > > The four errors are a result of /usr/local/include being in the include path to early and causing some of the bind header files being picked up from the /usr/local rather than the source tree. > > Here is a patch to source tree which fixes the problem: > > diff -ruN bind-9.10.5-P3/bin/nsupdate/Makefile.in bind-9.10.5-P3-fixed/bin/nsupdate/Makefile.in > --- bind-9.10.5-P3/bin/nsupdate/Makefile.in 2017-07-07 16:02:06.000000000 +0100 > +++ bind-9.10.5-P3-fixed/bin/nsupdate/Makefile.in 2017-07-19 10:09:53.000000000 +0100 > @@ -28,8 +28,8 @@ > DST_GSSAPI_INC = @DST_GSSAPI_INC@ > > CINCLUDES = ${LWRES_INCLUDES} ${DNS_INCLUDES} \ > - ${BIND9_INCLUDES} @DST_OPENSSL_INC@ ${ISC_INCLUDES} \ > - ${ISCCFG_INCLUDES} ${DST_GSSAPI_INC} > + ${BIND9_INCLUDES} ${ISC_INCLUDES} \ > + ${ISCCFG_INCLUDES} ${DST_GSSAPI_INC} @DST_OPENSSL_INC@ > > CDEFINES = -DVERSION=\"${VERSION}\" @CRYPTO@ @USE_GSSAPI@ > CWARNINGS = > > --- > This email was received through isc.org Bug Submission Form > > > --- In theory, there is no difference between theory and practice; experience suggests that in practice, there is.