Introduces OpenSSL 1.1 API
Replace defined(LIBRESSL_VERSION_NUMBER) with (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20700000L)
Status
| category/port | Problem | Ports Status | Upstream status/Comment |
|---|---|---|---|
| archivers/libarchive | 1.1 API | | Upstream pull-requestIn ports |
| audio/vamp-plugin-sdk | |||
| databases/freetds | 1.1 API | | Upstream pull-requestIn ports |
| databases/freetds-devel | Upstream pull-request | ||
| databases/mongodb34 | 1.1 API | | Upstream pull-request In ports |
| databases/mongodb36 | 1.1 API | | Upstream pull-request In ports |
| databases/mysac | |||
| databases/mysql56-server | | In ports | |
| databases/pecl-mongodb | |||
| databases/pecl-mongodb@php70 | |||
| databases/pecl-mongodb@php71 | |||
| databases/pecl-mongodb@php72 | |||
| databases/ruby-mysql | |||
| databases/sqlcipher | PR228248 | ||
| deskutils/spice-gtk | |||
| devel/grpc | | Upstream pull-requestIn ports | |
| devel/libevent | 1.1 API | | Upstream pull-requestIn ports |
| devel/libgit2 | 1.1 API | | Upstream pull-requestIn ports |
| devel/mongo-c-driver | |||
| dns/bind910 | bind912 patch applies | ||
| dns/bind911 | bind912 patch applies | ||
| dns/bind912 | 1.1 API | | Upstream fixedIn ports |
| dns/bind99 | bind912 patch applies | ||
| dns/bind9-devel | bind912 patch applies | ||
| dns/bind-tools | | Slave-port of bind912In ports | |
| dns/powerdns | 1.1 API | | Upstream pull-requestIn ports |
| dns/powerdns-recursor | 1.1 API | | Upstream pull-requestIn ports |
| dns/powerdns-recursor40 | 1.1 API | | Upstream pull-requestIn ports |
| emulators/virtualbox | PR228219 | ||
| ftp/curl | 1.1 API | | Upstream pull-requestIn ports |
| games/tinymux | |||
| games/tome4 | |||
| irc/irssi | 1.1 API | | In ports |
| lang/erlang-runtime20 | | In ports | |
| lang/python27 | 1.1 API | | Review D14837In ports |
| lang/python35 | 1.1 API | | Review D14837In ports |
| lang/python36 | 1.1 API | | Review D14837 Fixed in 3.6.5In ports |
| lang/ruby24 | 1.1 API | | |
| lang/ruby25 | 1.1 API | | |
| lang/rust | PR226955 | ||
| lang/rust-nightly | |||
| mail/cyrus-imapd24 | | In ports | |
| mail/cyrus-imapd25 | | In ports | |
| mail/cyrus-imapd30 | | Upstream pull-requestIn ports | |
| mail/sendmail | | In ports | |
| multimedia/winff | |||
| net/haproxy | PR226956 | Patches upstreamed via mail | |
| net/hostapd | | Upstream mailIn ports | |
| net/netatalk3 | | In ports | |
| net/nuster | |||
| net/openldap24-server | | Upstream emailIn ports | |
| net/qt4-network | |||
| net/qt5-network | 1.1 API | PR228344 | Upstream issue |
| net-mgmt/seafile-server | |||
| net-mgmt/sx | | In ports | |
| net-mgmt/zabbix32-proxy | PSK | ||
| net-mgmt/zabbix32-server | PSK | ||
| net-mgmt/zabbix34-proxy | PSK | ||
| net-mgmt/zabbix34-server | PSK | ||
| net-mgmt/zabbix3-proxy | PSK | ||
| net-mgmt/zabbix3-server | PSK | ||
| net-p2p/transmission-cli | | Upstream pull-requestIn ports | |
| net-p2p/transmission-daemon | | Slave-port of transmission-cliIn ports | |
| net-p2p/transmission-qt5 | | Slave-port of transmission-cliIn ports | |
| security/duo | |||
| security/krb5 | build regression | | In ports |
| security/openconnect | |||
| security/opensc | |||
| security/openvpn | | In ports | |
| security/php70-openssl | 1.1 API | | php72 patch appliesIn ports |
| security/php71-openssl | 1.1 API | | php72 patch appliesIn ports |
| security/php72-openssl | 1.1 API | | Upstream PRIn ports |
| security/py-cryptography | 1.1 API | PR226906 | Patches Upstream |
| security/py-cryptography@py36 | 1.1 API | PR226906 | Patches Upstream |
| security/rubygem-openssl | |||
| security/stunnel | 1.1 API & 2.6 regression | PR224148 | |
| security/trousers | | Upstream issueIn ports | |
| security/wpa_supplicant | | Upstream mailIn ports | |
| security/xmlsec1 | 1.1 API | | Upstream pull-requestIn ports |
| sysutils/bacula9-client | 1.1 API | PR228402 | |
| sysutils/pcbsd-utils | |||
| textproc/erlang-fast_xml | |||
| textproc/rubygem-github-linguist | |||
| www/apache24 | 1.1 API | | Upstream PRIn ports |
| www/aria2 | | Upstream pull-requestIn ports | |
| www/h2o | | Upstream issue/patchIn ports | |
| www/nghttp2 | 1.1 API | | UpstreamIn ports |
| www/sogo3 | PR228150 |
Bulk builds
Initial bulk builds
Initially, a full bulk build was run with security/libressl 2.6.4 so it could be compared with the failures of the security/libressl-devel 2.7.0 bulk build.<<BR>
LibreSSL 2.6.4 reference poudriere logs
LibreSSL 2.7.0 first full build logs
OpenSSL 1.1 API
Looks like failure is triggered on clang 6 and later. Reported by Daniel Stenberg of cURL and Kris Moore of TrueOS for Apache 2.4.33.
cURL failure
Observed on MacOS by Daniel Stenberg on Apple MacOS
vtls/openssl.c:2805:35: error: passing 'const X509_ALGOR *' (aka 'const struct X509_algor_st *') to parameter of type 'X509_ALGOR *' (aka 'struct X509_algor_st *') discards qualifiers [-Werror,-Wincompatible-pointer-types-discards-qualifiers]
X509_signature_print(mem, palg, a);
^~~~
/usr/local/Cellar/libressl/2.7.2/include/openssl/x509.h:670:46: note: passing argument to parameter 'alg' here
int X509_signature_print(BIO *bp,X509_ALGOR *alg, ASN1_STRING *sig);
^
1 error generated.
Fixed with openssl: provide defines for argument typecasts to build warning-free
Apache 2.4 failure
Observed by Kris Moore of TrueOS on FreeBSD 12-STABLE (i.e. TrueOS) which has clang 6.
--- ssl_engine_vars.slo ---
ssl_engine_vars.c:536:25: error: passing 'const ASN1_OBJECT **' (aka 'const struct asn1_object_st **') to parameter of type 'ASN1_OBJECT **' (aka 'struct asn1_object_st **') discards qualifiers in nested pointer types [-Werror,-Wincompatible-pointer-types-discards-qualifiers]
X509_ALGOR_get0(&paobj, NULL, NULL, X509_get0_tbs_sigalg(xs));
^~~~~~
/usr/include/openssl/x509.h:774:36: note: passing argument to parameter 'paobj' here
void X509_ALGOR_get0(ASN1_OBJECT **paobj, int *pptype, void **ppval,
^
ssl_engine_vars.c:536:45: error: passing 'const X509_ALGOR *' (aka 'const struct X509_algor_st *') to parameter of type 'X509_ALGOR *' (aka 'struct X509_algor_st *') discards qualifiers [-Werror,-Wincompatible-pointer-types-discards-qualifiers]
X509_ALGOR_get0(&paobj, NULL, NULL, X509_get0_tbs_sigalg(xs));
^~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/openssl/x509.h:775:19: note: passing argument to parameter 'algor' here
X509_ALGOR *algor);
^
2 errors generated.
Work-around: Set CFLAGS+= -Wno-incompatible-pointer-types-discards-qualifiers in port Makefile.