When neither libgcrypt nor nss are provided, CRYPTO_FOUND is false, and therefore src/OVAL/probes/crapi/ does not get built causing:
undefined reference to crapi_init' when building without crypto`
However src/OVAL/probes/crapi/crapi.c does provide a dummy implementation of crapi_init() provided when neither libgcrypt nor nss are available, which seems to indicate that there was a plan for supporting the case without crypto... but this dummy implementation is not even linked in.
I'm not sure what the right fix is here: to not support building without crypto by bailing out at the configure if neither libgcrypt nor nss are available? Or compile in crapi/ even when no crypto is available?