Build fails on Windows: linker chokes due to missing function InitSecurityInterfaceA

[phenaproxima]

My build is failing on Windows, with static-php-cli 2.6.1.

Here's the build log: https://github.com/drupal/cms-launcher/actions/runs/16333991122/job/46142404600#step:8:5704

The error that takes it down seems to be (including the backtrace):

Creating library D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\php.lib and object D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\php.exp
libcurl_a.lib(curl_sspi.obj) : error LNK2001: unresolved external symbol InitSecurityInterfaceA
D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\php.exe : fatal error LNK1120: 1 unresolved externals
NMAKE : fatal error U1077: '"link.exe" /nologo @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\PHP_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\CLI_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\BZ2_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\CTYPE_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\CURL_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\DATE_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\FILTER_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\GD_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\HASH_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\ICONV_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\JSON_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\MBSTRING_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\OPCACHE_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\OPENSSL_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\PCRE_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\RANDOM_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\REFLECTION_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\SESSION_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\SPL_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\SQLITE3_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\STANDARD_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\TOKENIZER_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\YAML_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\ZIP_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\ZLIB_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\LIBXML_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\DOM_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\PDO_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\PDO_SQLITE_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\PHAR_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\SIMPLEXML_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\XML_GLOBAL_OBJS.txt" @"D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\resp\XMLWRITER_GLOBAL_OBJS.txt" libbz2_a.lib  libcurl_a.lib libcrypto.lib libssl.lib Crypt32.Lib WinMM.Lib Wldap32.Lib normaliz.lib libssh2.lib nghttp2.lib   zlib_a.lib libjpeg_a.lib libpng_a.lib libfreetype_a.lib libiconv_a.lib libwebp.lib libsharpyuv.lib avif.lib User32.Lib Gdi32.Lib  libiconv_a.lib    libcrypto.lib libssl.lib Crypt32.Lib      libsqlite3_a.lib iphlpapi.lib  yaml.lib libzip_a.lib libbz2_a.lib zlib_a.lib liblzma_a.lib zlib_a.lib libxml2_a.lib libiconv_a.lib   libsqlite3_a.lib     D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\Zend\jump_x86_64_ms_pe_masm.obj D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\Zend\make_x86_64_ms_pe_masm.obj kernel32.lib ole32.lib user32.lib advapi32.lib shell32.lib ws2_32.lib Dnsapi.lib psapi.lib bcrypt.lib ws2_32.lib shell32.lib D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\php.exe.res /out:D:\a\cms-launcher\cms-launcher\source\php-src\x64\Release\php.exe /nologo /libpath:"D:\a\cms-launcher\cms-launcher\buildroot\lib" /stack:67108864 /ltcg /nodefaultlib:msvcrt /nodefaultlib:msvcrtd /ignore:4286' : return code '0x460'
Stop.
[01:35:28] [E] Uncaught SPC\exception\RuntimeException: Command run failed with code[2]: cd /d "D:\a\cms-launcher\cms-launcher\source\php-src" && D:\a\cms-launcher\cms-launcher\php-sdk-binary-tools\phpsdk-vs17-x64.bat -t nmake_cli_wrapper.bat --task-args php.exe at D:\a\cms-launcher\cms-launcher\src\globals\functions.php(177)
[01:35:28] [E] #0 D:\a\cms-launcher\cms-launcher\src\SPC\util\WindowsCmd.php(52): f_passthru()
#1 D:\a\cms-launcher\cms-launcher\src\SPC\builder\windows\WindowsBuilder.php(167): SPC\util\WindowsCmd->exec()
#2 D:\a\cms-launcher\cms-launcher\src\SPC\builder\windows\WindowsBuilder.php(133): SPC\builder\windows\WindowsBuilder->buildCli()
#3 D:\a\cms-launcher\cms-launcher\src\SPC\command\BuildPHPCommand.php(208): SPC\builder\windows\WindowsBuilder->buildPHP()
#4 D:\a\cms-launcher\cms-launcher\src\SPC\command\BaseCommand.php(107): SPC\command\BuildPHPCommand->handle()
#5 D:\a\cms-launcher\cms-launcher\vendor\symfony\console\Command\Command.php(326): SPC\command\BaseCommand->execute()
#6 D:\a\cms-launcher\cms-launcher\vendor\symfony\console\Application.php(1078): Symfony\Component\Console\Command\Command->run()
#7 D:\a\cms-launcher\cms-launcher\vendor\symfony\console\Application.php(324): Symfony\Component\Console\Application->doRunCommand()
#8 D:\a\cms-launcher\cms-launcher\vendor\symfony\console\Application.php(175): Symfony\Component\Console\Application->doRun()
#9 D:\a\cms-launcher\cms-launcher\bin\spc(31): Symfony\Component\Console\Application->run()
#10 {main}

A known issue? I haven't changed anything about the build process part from bumping static-php-cli to 2.6.1, but this was also happening on 2.5.2.

[henderkes]

Will need to link in Secur32.lib for that, sounds like a bug in libcurl that it doesn't automatically do that. Unfortunately I don't maintain the windows builds as all my servers run in wsl/vm's for better performance.

[phenaproxima]

Dang. I have no idea how to go about that; maybe libcurl needs to be patched?

[crazywhalecc]

I can try to reproduce it locally. What extension combination and VS version did you use?

EDIT: I found in your actions workflows, thanks.

[phenaproxima]

A little googling, and the clue from @henderkes, suggests that this might have broken in cURL 8.5.10, released less than a day ago. My deductive process, for reference:

• The missing function is InitSecurityInterfaceA, which led me to https://learn.microsoft.com/en-us/windows/win32/api/sspi/nf-sspi-initsecurityinterfacea. I haven't got the foggiest idea what SSPI is, but I can see that this function has something to do with it.
• cURL's changelog (https://curl.se/ch/8.15.0.html) includes a mention of SSPI, linking to cmake: Check USE_WINDOWS_SSPI instead of CURL_WINDOWS_SSPI when adding secur32 to CURL_LIBS curl/curl#17728.

That commit seems to change the condition under which Secur32.lib is linked in, so that seems like a pretty strong indicator that @henderkes' theory might be correct. That would also explain why this error was happening with static-php-cli 2.5.2 as well.

I guess we could readily confirm or deny that this is the problem if we try compiling PHP with cURL 8.14.1, which seems to be the previous version.

As a workaround, is there a way for me, at the command line, to force static-php-cli to use a specific version of cURL?

[phenaproxima]

Taking a shot in the dark here, but if we add -DUSE_WINDOWS_SSPI=ON to src/SPC/builder/windows/library/curl.php, would that flip the switch correctly?

[crazywhalecc]

@phenaproxima We use SSPI instead of openssl linking with libcurl on Windows builds. You mentioned libcurl pr in 8.15 is exactly accurate. I will submit a PR to try fix this. But using USE_WINDOWS_SSPI is not working from my side, seems the extension curl does not add secur32.lib to linking line, explictly linking secur32.lib to php.exe is a workaround.