2715. [bug] Require OpenSSL support to be explicitly disabled.

                        [RT #20288]

diff --git a/CHANGES b/CHANGES
index 65c04418fe03e381a9a0af8d2cd8f0ec35b0d408..4a59da7e8c747c4f7cc976235d77c5ece57ce4df 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+2715.  [bug]           Require OpenSSL support to be explicitly disabled.
+                       [RT #20288]
+
 2714.  [port]          aix/powerpc: 'asm("ics");' needs non standard assembler
                        flags.
 

diff --git a/configure.in b/configure.in
index 4c353fca6fcf22a47bda806cdb6ebc3b03d71e5a..9ee81d9deb856657904d7b07cc28c23c644b4c23 100644 (file)
--- a/configure.in
+++ b/configure.in
@@ -18,7 +18,7 @@ AC_DIVERT_PUSH(1)dnl
 esyscmd([sed "s/^/# /" COPYRIGHT])dnl
 AC_DIVERT_POP()dnl
 
-AC_REVISION($Revision: 1.457.26.13 $)
+AC_REVISION($Revision: 1.457.26.14 $)
 
 AC_INIT(lib/dns/name.c)
 AC_PREREQ(2.59)
@@ -503,7 +503,9 @@ case "$use_openssl" in
        auto)
                DST_OPENSSL_INC=""
                USE_OPENSSL=""
-               AC_MSG_RESULT(not found)
+               AC_MSG_ERROR(
+[OpenSSL was not found in any of $openssldirs; use --with-openssl=/path
+If you don't want OpenSSL, use --without-openssl])
                ;;
        *)
                if test "$use_openssl" = "yes"
@@ -3004,6 +3006,12 @@ AC_CONFIG_FILES([
 
 AC_OUTPUT
 
+if test "X$USE_OPENSSL" = "X"; then
+cat << \EOF                                                             
+BIND is being built without OpenSSL. This means it will not have DNSSEC support.
+EOF
+fi
+
 if test "X$OPENSSL_WARNING" != "X"; then
 cat << \EOF
 WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING WARNING