2.7 [FreeBSD WIKI]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
Introduces %%OpenSSL%% 1.1 API
Replace ''%%defined(LIBRESSL_VERSION_NUMBER)%%'' with ''%%(defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20700000L)%%''

====== Status ======

^  category/port  ^  Problem  ^  Ports Status  ^  Upstream status/Comment  ^
| archivers/libarchive | 1.1 API | <del>[[https://bugs.freebsd.org/226853|PR226853]]</del> | [[https://github.com/libarchive/libarchive/pull/1005|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/465666|In ports]] |
| audio/vamp-plugin-sdk |  |  |  |
| databases/freetds | 1.1 API | <del>[[https://bugs.freebsd.org/226911|PR226911]]</del> | [[https://github.com/FreeTDS/freetds/pull/204|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/469309|In ports]] |
| databases/freetds-devel |  |  | [[https://github.com/FreeTDS/freetds/pull/204|Upstream pull-request]] |
| databases/mongodb34 | 1.1 API | <del>[[https://bugs.freebsd.org/229606|PR229606]]</del> | [[https://github.com/mongodb/mongo/pull/1252|Upstream pull-request]] [[https://svnweb.freebsd.org/changeset/ports/474176|In ports]] |
| databases/mongodb36 | 1.1 API | <del>[[https://bugs.freebsd.org/229606|PR229608]]</del> | [[https://github.com/mongodb/mongo/pull/1252|Upstream pull-request]] [[https://svnweb.freebsd.org/changeset/ports/474192|In ports]] |
| databases/mysac |  |  |  |
| databases/mysql56-server |  | <del>[[https://bugs.freebsd.org/227178|PR227178]]</del> | [[https://svnweb.freebsd.org/changeset/ports/469311|In ports]] |
| databases/pecl-mongodb |  |  |  |
| databases/pecl-mongodb@php70 |  |  |  |
| databases/pecl-mongodb@php71 |  |  |  |
| databases/pecl-mongodb@php72 |  |  |  |
| databases/ruby-mysql |  |  |  |
| databases/sqlcipher |  | [[https://bugs.freebsd.org/228248|PR228248]] |  |
| deskutils/spice-gtk |  |  |  |
| devel/grpc |  | <del>[[https://bugs.freebsd.org/227187|PR227187]]</del> | [[https://github.com/grpc/grpc/pull/14898|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/466203|In ports]] |
| devel/libevent | 1.1 API | <del>[[https://bugs.freebsd.org/226900|PR226900]]</del> | [[https://github.com/libevent/libevent/pull/617|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/467904|In ports]] |
| devel/libgit2 | 1.1 API | <del>[[https://bugs.freebsd.org/226954|PR226954]]</del> | [[https://github.com/libgit2/libgit2/pull/4607|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/465696|In ports]] |
| devel/mongo-c-driver |  |  |  |
| dns/bind910 |  |  | bind912 patch applies |
| dns/bind911 |  |  | bind912 patch applies |
| dns/bind912 | 1.1 API | <del>[[https://bugs.freebsd.org/226903|PR226903]]</del> | [[https://gitlab.isc.org/isc-projects/bind9/merge_requests/234|Upstream fixed]][[https://svnweb.freebsd.org/changeset/ports/471999|In ports]] |
| dns/bind99 |  |  | bind912 patch applies |
| dns/bind9-devel |  |  | bind912 patch applies |
| dns/bind-tools |  | <del>[[https://bugs.freebsd.org/226903|PR226903]]</del> | Slave-port of bind912[[https://svnweb.freebsd.org/changeset/ports/471999|In ports]] |
| dns/powerdns | 1.1 API | <del>[[https://bugs.freebsd.org/227184|PR227184]]</del> | [[https://github.com/PowerDNS/pdns/pull/6434|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/466359|In ports]] |
| dns/powerdns-recursor | 1.1 API | <del>[[https://bugs.freebsd.org/227183|PR227183]]</del> | [[https://github.com/PowerDNS/pdns/pull/6434|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/466346|In ports]] |
| dns/powerdns-recursor40 | 1.1 API | <del>[[https://bugs.freebsd.org/227183|PR227183]]</del> | [[https://github.com/PowerDNS/pdns/pull/6434|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/466355|In ports]] |
| emulators/virtualbox |  | [[https://bugs.freebsd.org/228219|PR228219]] |  |
| ftp/curl | 1.1 API | <del>[[https://bugs.freebsd.org/226845|PR226845]]</del> | [[https://github.com/curl/curl/pull/2447|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/465485|In ports]] |
| games/tinymux |  |  |  |
| games/tome4 |  |  |  |
| irc/irssi | 1.1 API | <del>[[https://bugs.freebsd.org/226925|PR226925]]</del> | [[https://svnweb.freebsd.org/changeset/ports/465618|In ports]] |
| lang/erlang-runtime20 |  | <del>[[https://bugs.freebsd.org/227942|PR227942]]</del> | [[https://svnweb.freebsd.org/changeset/ports/469374|In ports]] |
| lang/python27 | 1.1 API | <del>[[https://bugs.freebsd.org/226883|PR226883]]</del> | [[https://reviews.freebsd.org/D14837|Review D14837]][[https://svnweb.freebsd.org/changeset/ports/468566|In ports]] |
| lang/python35 | 1.1 API | <del>[[https://bugs.freebsd.org/226883|PR226883]]</del> | [[https://reviews.freebsd.org/D14837|Review D14837]][[https://svnweb.freebsd.org/changeset/ports/468567|In ports]] |
| lang/python36 | 1.1 API | <del>[[https://bugs.freebsd.org/226883|PR226883]]</del> | [[https://reviews.freebsd.org/D14837|Review D14837]] Fixed in 3.6.5[[https://svnweb.freebsd.org/changeset/ports/466295|In ports]] |
| lang/ruby24 | 1.1 API | <del>[[https://bugs.freebsd.org/227851|PR227851]]</del> | <del>[[https://github.com/ruby/openssl/pull/193|Upstream pull-request]]</del>[[https://svnweb.freebsd.org/changeset/ports/471799|In ports]] |
| lang/ruby25 | 1.1 API | <del>[[https://bugs.freebsd.org/226852|PR226852]]</del> | <del>[[https://github.com/ruby/openssl/pull/193|Upstream pull-request]]</del>[[https://svnweb.freebsd.org/changeset/ports/465590|In ports]] |
| lang/rust |  | [[https://bugs.freebsd.org/226955|PR226955]] |  |
| lang/rust-nightly |  |  |  |
| mail/cyrus-imapd24 |  | <del>[[https://bugs.freebsd.org/227167|PR227167]]</del> | [[https://svnweb.freebsd.org/changeset/ports/466768|In ports]] |
| mail/cyrus-imapd25 |  | <del>[[https://bugs.freebsd.org/227165|PR227165]]</del> | [[https://svnweb.freebsd.org/changeset/ports/466766|In ports]] |
| mail/cyrus-imapd30 |  | <del>[[https://bugs.freebsd.org/227166|PR227166]]</del> | [[https://github.com/cyrusimap/cyrus-imapd/pull/2305|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/466767|In ports]] |
| mail/sendmail |  | <del>[[https://bugs.freebsd.org/227171|PR227171]]</del> | [[https://svnweb.freebsd.org/changeset/ports/466240|In ports]] |
| multimedia/winff |  |  |  |
| net/haproxy |  | [[https://bugs.freebsd.org/226956|PR226956]] | Patches upstreamed via mail |
| net/hostapd |  | <del>[[https://bugs.freebsd.org/227172|PR227172]]</del> | [[http://lists.infradead.org/pipermail/hostap/2018-April/038375.html|Upstream mail]][[https://svnweb.freebsd.org/changeset/ports/466381|In ports]] |
| net/netatalk3 |  | <del>[[https://bugs.freebsd.org/227860|PR227860]]</del> | [[https://svnweb.freebsd.org/changeset/ports/469690|In ports]] |
| net/nuster |  |  |  |
| net/openldap24-server |  | <del>[[https://bugs.freebsd.org/227192|PR227192]]</del> | [[https://www.openldap.org/its/index.cgi?findid=8832|Upstream email]][[https://svnweb.freebsd.org/changeset/ports/467605|In ports]] |
| net/qt4-network |  |  |  |
| net/qt5-network | 1.1 API | [[https://bugs.freebsd.org/228344|PR228344]] | [[https://bugreports.qt.io/browse/QTBUG-68374|Upstream issue]] |
| net-mgmt/seafile-server |  |  |  |
| net-mgmt/sx |  | <del>[[https://bugs.freebsd.org/227188|PR227188]]</del> | [[https://svnweb.freebsd.org/changeset/ports/466206|In ports]] |
| net-mgmt/zabbix32-proxy | PSK |  |  |
| net-mgmt/zabbix32-server | PSK |  |  |
| net-mgmt/zabbix34-proxy | PSK |  |  |
| net-mgmt/zabbix34-server | PSK |  |  |
| net-mgmt/zabbix3-proxy | PSK |  |  |
| net-mgmt/zabbix3-server | PSK |  |  |
| net-p2p/transmission-cli |  | <del>[[https://bugs.freebsd.org/226953|PR226953]]</del> | [[https://github.com/transmission/transmission/pull/570|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/466808|In ports]] |
| net-p2p/transmission-daemon |  | <del>[[https://bugs.freebsd.org/226953|PR226953]]</del> | Slave-port of transmission-cli[[https://svnweb.freebsd.org/changeset/ports/466808|In ports]] |
| net-p2p/transmission-qt5 |  | <del>[[https://bugs.freebsd.org/226953|PR226953]]</del> | Slave-port of transmission-cli[[https://svnweb.freebsd.org/changeset/ports/466808|In ports]] |
| security/duo |  |  |  |
| security/krb5 | build regression | <del>[[https://bugs.freebsd.org/228970|PR228970]]</del> | [[https://svnweb.freebsd.org/changeset/ports/472286|In ports]] |
| security/openconnect |  |  |  |
| security/opensc |  |  |  |
| security/openvpn |  | <del>2.4.6</del> | [[https://svnweb.freebsd.org/changeset/ports/468306|In ports]] |
| security/php70-openssl | 1.1 API | <del>[[https://bugs.freebsd.org/226902|PR226902]]</del> | php72 patch applies[[https://svnweb.freebsd.org/changeset/ports/468345|In ports]] |
| security/php71-openssl | 1.1 API | <del>[[https://bugs.freebsd.org/226902|PR226902]]</del> | php72 patch applies[[https://svnweb.freebsd.org/changeset/ports/468345|In ports]] |
| security/php72-openssl | 1.1 API | <del>[[https://bugs.freebsd.org/226902|PR226902]]</del> | [[https://bugs.php.net/bug.php?id=76174|Upstream PR]][[https://svnweb.freebsd.org/changeset/ports/468343|In ports]] |
| security/py-cryptography | 1.1 API | [[https://bugs.freebsd.org/226906|PR226906]] | [[http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security/py-cryptography/patches/|Patches]] [[https://github.com/pyca/cryptography/pull/4169|Upstream]] |
| security/py-cryptography@py36 | 1.1 API | [[https://bugs.freebsd.org/226906|PR226906]] | [[http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security/py-cryptography/patches/|Patches]] [[https://github.com/pyca/cryptography/pull/4169|Upstream]] |
| security/rubygem-openssl |  |  |  |
| security/stunnel | 1.1 API & 2.6 regression | [[https://bugs.freebsd.org/224148|PR224148]] |  |
| security/trousers |  | <del>[[https://bugs.freebsd.org/226927|PR226927]]</del> | [[https://sourceforge.net/p/trousers/bugs/222/|Upstream issue]][[https://svnweb.freebsd.org/changeset/ports/467906|In ports]] |
| security/wpa_supplicant |  | <del>[[https://bugs.freebsd.org/227173|PR227173]]</del> | [[http://lists.infradead.org/pipermail/hostap/2018-April/038375.html|Upstream mail]][[https://svnweb.freebsd.org/changeset/ports/466153|In ports]] |
| security/xmlsec1 | 1.1 API | <del>[[https://bugs.freebsd.org/226933|PR226933]]</del> | [[https://github.com/lsh123/xmlsec/pull/159|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/468125|In ports]] |
| sysutils/bacula9-client | 1.1 API | [[https://bugs.freebsd.org/228402|PR228402]] |  |
| sysutils/pcbsd-utils |  |  |  |
| textproc/erlang-fast_xml |  |  |  |
| textproc/rubygem-github-linguist |  |  |  |
| www/apache24 | 1.1 API | <del>[[https://bugs.freebsd.org/226647|PR226647]]</del> | [[https://bz.apache.org/bugzilla/show_bug.cgi?id=62236|Upstream PR]][[https://svnweb.freebsd.org/changeset/ports/465461|In ports]] |
| www/aria2 |  | <del>[[https://bugs.freebsd.org/227177|PR227177]]</del> | [[https://github.com/aria2/aria2/pull/1174|Upstream pull-request]][[https://svnweb.freebsd.org/changeset/ports/466299|In ports]] |
| www/h2o |  | <del>[[https://bugs.freebsd.org/227169|PR227169]]</del> | [[https://github.com/h2o/h2o/issues/1706|Upstream issue/patch]][[https://svnweb.freebsd.org/changeset/ports/467918|In ports]] |
| www/nghttp2 | 1.1 API | <del>[[https://bugs.freebsd.org/226922|PR226922]]</del> | [[https://github.com/nghttp2/nghttp2/pull/1153|Upstream]][[https://svnweb.freebsd.org/changeset/ports/466298|In ports]] |
| www/sogo3 |  | [[https://bugs.freebsd.org/228150|PR228150]] |  |

====== Bulk builds ======

===== Initial bulk builds =====

Initially, a full bulk build was run with ''%%security/libressl%%'' 2.6.4 so it could be compared with the failures of the ''%%security/libressl-devel%%'' 2.7.0 bulk build.<%%<%%BR>
[[https://keg.brnrd.eu/build.html?mastername=111amd64-default-libressl&build=2018-03-22_07h59m42s|LibreSSL 2.6.4]] reference poudriere logs\\ 
[[https://keg.brnrd.eu/build.html?mastername=111amd64-default-libressldev&build=2018-03-22_20h46m47s|LibreSSL 2.7.0]] first full build logs

====== OpenSSL 1.1 API ======

Looks like failure is triggered on clang 6 and later. Reported by Daniel Stenberg of cURL and Kris Moore of %%TrueOS%% for Apache 2.4.33.

===== cURL failure =====

Observed on %%MacOS%% by Daniel Stenberg [[https://github.com/curl/curl/pull/2447#issuecomment-378044909|on Apple MacOS]]

<code>
vtls/openssl.c:2805:35: error: passing 'const X509_ALGOR *' (aka 'const struct X509_algor_st *') to parameter of type 'X509_ALGOR *' (aka 'struct X509_algor_st *') discards qualifiers [-Werror,-Wincompatible-pointer-types-discards-qualifiers]
        X509_signature_print(mem, palg, a);
                                  ^~~~
/usr/local/Cellar/libressl/2.7.2/include/openssl/x509.h:670:46: note: passing argument to parameter 'alg' here
int X509_signature_print(BIO *bp,X509_ALGOR *alg, ASN1_STRING *sig);
                                             ^
1 error generated.
</code>

Fixed with [[https://github.com/curl/curl/commit/256b80fe81ad6de63e7fcffbef5e2ce554319ae8|openssl: provide defines for argument typecasts to build warning-free]]

===== Apache 2.4 failure =====

Observed by Kris Moore of %%TrueOS%% [[https://builds.ixsystems.com/jenkins/job/FreeNAS%20-%20Build%20Pipeline/job/PR-31/63/artifact/artifacts/ports/latest-per-pkg/apache24/2.4.33/ja-freenas-pipeline-p.log/*view*/|on FreeBSD 12-STABLE]] (i.e. %%TrueOS%%) which has clang 6.

<code>
--- ssl_engine_vars.slo ---
ssl_engine_vars.c:536:25: error: passing 'const ASN1_OBJECT **' (aka 'const struct asn1_object_st **') to parameter of type 'ASN1_OBJECT **' (aka 'struct asn1_object_st **') discards qualifiers in nested pointer types [-Werror,-Wincompatible-pointer-types-discards-qualifiers]
        X509_ALGOR_get0(&paobj, NULL, NULL, X509_get0_tbs_sigalg(xs));
                        ^~~~~~
/usr/include/openssl/x509.h:774:36: note: passing argument to parameter 'paobj' here
void X509_ALGOR_get0(ASN1_OBJECT **paobj, int *pptype, void **ppval,
                                   ^
ssl_engine_vars.c:536:45: error: passing 'const X509_ALGOR *' (aka 'const struct X509_algor_st *') to parameter of type 'X509_ALGOR *' (aka 'struct X509_algor_st *') discards qualifiers [-Werror,-Wincompatible-pointer-types-discards-qualifiers]
        X509_ALGOR_get0(&paobj, NULL, NULL, X509_get0_tbs_sigalg(xs));
                                            ^~~~~~~~~~~~~~~~~~~~~~~~
/usr/include/openssl/x509.h:775:19: note: passing argument to parameter 'algor' here
                                                X509_ALGOR *algor);
                                                            ^
2 errors generated.
</code>

Work-around: Set ''%%CFLAGS+= -Wno-incompatible-pointer-types-discards-qualifiers%%'' in port ''%%Makefile%%''.