2715. [bug] Require OpenSSL support to be explicitly disabled.

                        [RT #20288]

diff --git a/CHANGES b/CHANGES
index 580b394d96de6497d70ffc452361cfa40dc54b77..520ff6357f6db51e3973259df63f8b062b673209 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+2715.  [bug]           Require OpenSSL support to be explicitly disabled.
+                       [RT #20288]
+
 2714.  [port]          aix/powerpc: 'asm("ics");' needs non standard assembler
                        flags.
 

diff --git a/configure.in b/configure.in
index 17f6cb9855cf8a1fbe8e2d834c6b5bc6fe2196ff..034f7d8e1bb5e09f15f2bdb5f08e42068e448502 100644 (file)
--- a/configure.in
+++ b/configure.in
@@ -18,7 +18,7 @@ AC_DIVERT_PUSH(1)dnl
 esyscmd([sed "s/^/# /" COPYRIGHT])dnl
 AC_DIVERT_POP()dnl
 
-AC_REVISION($Revision: 1.432.60.36 $)
+AC_REVISION($Revision: 1.432.60.37 $)
 
 AC_INIT(lib/dns/name.c)
 AC_PREREQ(2.59)
@@ -515,7 +515,9 @@ case "$use_openssl" in
        auto)
                DST_OPENSSL_INC=""
                USE_OPENSSL=""
-               AC_MSG_RESULT(not found)
+               AC_MSG_ERROR(
+[OpenSSL was not found in any of $openssldirs; use --with-openssl=/path
+If you don't want OpenSSL, use --without-openssl])
                ;;
        *)
                if test "$use_openssl" = "yes"
@@ -2997,6 +2999,12 @@ AC_CONFIG_FILES([
 
 AC_OUTPUT
 
+if test "X$USE_OPENSSL" = "X"; then
+cat << \EOF                                                             
+BIND is being built without OpenSSL. This means it will not have DNSSEC support.
+EOF
+fi
+
 if test "X$OPENSSL_WARNING" != "X"; then
 cat << \EOF
 WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING