Build failure for shibboleth-sp2 2.4.2

[Russ Allbery]

Well, I thought that the reported bug was just because we hadn't upgraded
everything yet, but I'm now getting this when trying to build 2.4.2
against the latest versions of everything.

Making all in shibd
make[3]: Entering directory `/tmp/buildd/shibboleth-sp2-2.4.2+dfsg/shibd'
g++ -DHAVE_CONFIG_H -I. -I..   -pthread -g -Wall -O2 -O2 -DNDEBUG     -pthread -Wall -g -O2 -O2 -DNDEBUG -c -o shibd.o shibd.cpp
/bin/sh ../libtool --silent --tag=CXX   --mode=link g++  -pthread -Wall -g -O2 -O2 -DNDEBUG   -o shibd shibd.o -lsaml -lxmltooling -lxml-security-c  ../shibsp/libshibsp.la -lxerces-c -L/usr/lib -llog4cpp -lnsl  
../shibsp/.libs/libshibsp.so: undefined reference to `non-virtual thunk to xmltooling::AbstractPKIXTrustEngine::validate(x509_st*, stack_st_X509*, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*) const'
../shibsp/.libs/libshibsp.so: undefined reference to `xmltooling::AbstractPKIXTrustEngine::validate(x509_st*, stack_st_X509*, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*) const'
collect2: ld returned 1 exit status

I confirmed that this was trying to link against the newly-packaged
xmltooling 1.4.1-2.

Scott, if you see this, have you seen this error before?  Do you have any
idea what might be wrong?  The header file and declaration is there; it's
just the link that fails.  It seems to be this method:

        bool validate(
            X509* certEE,
            STACK_OF(X509)* certChain,
            const CredentialResolver& credResolver,
            CredentialCriteria* criteria=nullptr
            ) const;

This is g++ 4.5.2.  The function does seem to be present in the library,
so I'm rather confused:

windlord:~> readelf -s --wide /usr/lib/libxmltooling.so | c++filt | grep AbstractPKIXTrustEngine::validate
  1190: 0013a280   922 FUNC    GLOBAL DEFAULT   12 xmltooling::AbstractPKIXTrustEngine::validate(unsigned short const*, char const*, xmlsignature::KeyInfo*, char const*, unsigned int, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*) const
  1965: 0013a9d0    71 FUNC    GLOBAL DEFAULT   12 xmltooling::AbstractPKIXTrustEngine::validate(x509_st*, stack_st*, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*) const
  2021: 00136ee0   462 FUNC    GLOBAL DEFAULT   12 xmltooling::AbstractPKIXTrustEngine::validate(XSECCryptoX509*, std::vector<XSECCryptoX509*, std::allocator<XSECCryptoX509*> > const&, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*) const
  2841: 0013aa20     7 FUNC    GLOBAL DEFAULT   12 non-virtual thunk to xmltooling::AbstractPKIXTrustEngine::validate(x509_st*, stack_st*, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*) const
  4707: 001370b0    10 FUNC    GLOBAL DEFAULT   12 non-virtual thunk to xmltooling::AbstractPKIXTrustEngine::validate(XSECCryptoX509*, std::vector<XSECCryptoX509*, std::allocator<XSECCryptoX509*> > const&, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*) const
  5010: 0013a620   937 FUNC    GLOBAL DEFAULT   12 xmltooling::AbstractPKIXTrustEngine::validate(xmlsignature::Signature&, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*) const
  5124: 00139fd0   678 FUNC    GLOBAL DEFAULT   12 xmltooling::AbstractPKIXTrustEngine::validateWithCRLs(x509_st*, stack_st*, xmltooling::CredentialResolver const&, xmltooling::CredentialCriteria*, std::vector<xmltooling::XSECCryptoX509CRL*, std::allocator<xmltooling::XSECCryptoX509CRL*> > const*) const

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>