Major changes in 1.1.0

Removed features (by default)

  • SSLv2
  • SSLv3
  • EGD

Ports with problems

For all failing ports, create a PR and set “Blocks” to PR228865 - security/openssl-devel: Multiple ports fail with OpenSSL 1.1.

From a bulk-build with DEFAULT_VERSIONS= ssl=openssl-devel on 2018-08-173 with ports tree from that day (https://svn.freebsd.org/ports/head@461733).

  1. Initial poudriere bulk logs poudriere logs available.
  2. After fixing Python, PostgreSQL poudriere logs
  3. After fixing more Python, erlang, openldap, … with TRYBROKEN enabled poudriere logs
  4. Latest poudriere bulk logs poudriere logs available (svn rev 472121)

Updated mid August 2018, bulk-builds with security/openssl (1.0.2p_1), and security/openssl-devel (openssl-devel-1.1.0h_2)

category/port Problem Ports Status Upstream status/Comment
archivers/libunrar5 incomplete type 'EVP_CIPHER_CTX' PR228901
archivers/unrar incomplete type 'EVP_CIPHER_CTX' PR228901
archivers/unrar-iconv incomplete type 'EVP_CIPHER_CTX' slave port of archivers/unrar
archivers/xar OpenSSL_add_all_ciphers in -lcrypto
audio/cpp-xmms2 incomplete type 'RSA'
audio/libshout undefined reference to `SSLeay_add_all_algorithms' PR228942
audio/p5-xmms2 incomplete type 'RSA'
audio/py-xmms2 incomplete type 'RSA'
audio/raop_play incomplete type 'RSA'
benchmarks/apib undefined reference to symbol `EVP_sha1@@OPENSSL_1_1_0'
benchmarks/polygraph CRYPTO_lock in -lcrypto
benchmarks/sipp SSL_library_init in -lssl
chinese/bitchx SSLeay in -lcrypto
comms/kermit incomplete type 'X509_STORE_CTX'
comms/trustedqsl incomplete type 'EVP_PKEY'
converters/wkhtmltopdf member access into incomplete type 'RSA' Qt problem
databases/galera asio/ssl.hpp was not found or not usable
databases/mariadb100-client incomplete type 'DH'
databases/mariadb101-client incomplete type 'DH'
databases/mariadb55-client incomplete type 'DH'
databases/mongodb undeclared identifier 'BIO_s_file_internal' Deleted
databases/mongodb32 incomplete type 'EVP_MD_CTX' PR230697
databases/mongodb32-tools incomplete type 'BIO_METHOD' PR230700
databases/mongodb34 no member named 'SSLv2_method' PR230698
databases/mongodb34-tools incomplete type 'BIO_METHOD' PR230701
databases/mongodb36-tools incomplete type 'BIO_METHOD' PR230728
databases/mysql56-client incomplete type 'DH' PR225888 5.6.40In ports
databases/mysql56-server undeclared identifier 'CRYPTO_malloc_init' PR228899
databases/mysql-connector-c incomplete type 'EVP_CIPHER_CTX'
databases/mysqlwsrep56-server incomplete type 'DH'
databases/mysqlwsrep57-server incomplete definition of type 'struct dh_st' PR230729
databases/pgadmin3 incomplete type 'EVP_CIPHER_CTX'
databases/pgpool-II-33 SSL_library_init in -lssl
databases/postgresql10-server BROKEN PR225875 In ports
deskutils/pinot undeclared identifier 'CRYPTO_NUM_LOCKS'
devel/ace incomplete type 'BIO_METHOD'
devel/android-tools-adb incomplete type 'RSA'
devel/aws-sdk-cpp
devel/cpp-netlib ERR_remove_thread_state
devel/cpprestsdk undeclared identifier 'SSL_R_SHORT_READ'
devel/dcmtk TLS1_TXT_RSA_EXPORT1024_WITH_DES_CBC_SHA
devel/gdcm incomplete type 'X509_STORE_CTX' PR229025
devel/gnome-vfs incomplete definition of type 'struct ssl_st' PR228896
devel/godot2 “currently only supporting version 1.0.x.”
devel/godot2-tools “currently only supporting version 1.0.x.”
devel/hadoop incomplete type 'HMAC_CTX'
devel/hadoop2 incomplete definition of type 'struct evp_cipher_ctx_st' PR228946
devel/kore unknown type name 'ECDSA_METHOD'
devel/libewf incomplete type 'EVP_MD_CTX' PR228941 In ports
devel/libmsocket incomplete type 'X509'
devel/libopkele incomplete type 'DH'
devel/mico incomplete type 'BIO'
devel/mongo-cxx-driver undeclared identifier 'BIO_s_file_internal' PR230702
devel/omniORB-4.1 incomplete type 'DH'
devel/p4 undefined reference to `SSL_load_error_strings' PR229021
devel/poco-ssl incomplete type 'EVP_CIPHER_CTX'
devel/ptlib undeclared identifier 'BIO_s_file_internal' PR229023
devel/qca incomplete type 'DSA_SIG' PR225920 Patch
devel/qca@qt5 incomplete type 'DSA_SIG' PR228902 Patch
devel/staf incomplete type 'EVP_MD_CTX'
devel/tcl-trf undeclared identifier 'SHA_Init' PR229026 SHA-0
devel/tla incomplete definition of type 'struct X509_name_entry_st'
devel/ucommon incomplete type 'EVP_CIPHER_CTX' PR229027
dns/credns HMAC_CTX_init in -lcrypto
dns/knot1 implicit declaration of function 'ENGINE_load_gost'
dns/opendd undefined reference to `BIO_set_conn_ip'
dns/samba-nsupdate OpenSSL has unsupported dynamic loading
dns/validns incomplete type 'RSA'
editors/openoffice-devel incomplete type 'EVP_CIPHER_CTX'
emulators/virtualbox-ose undefined reference to symbol `OPENSSL_init_ssl@@OPENSSL_1_1_0'
finance/openhbci incomplete type 'RSA'
finance/vanitygen implicit declaration of function 'BN_init'
ftp/bbftp incomplete type 'RSA'
ftp/gftp incomplete definition of type 'struct X509_extension_st'
ftp/vsftpd undefined reference to `OPENSSL_init_ssl'
ftp/wget BROKEN PR225872 In ports
games/ldmud incomplete type 'X509_STORE_CTX'
games/tinymux incomplete type 'EVP_MD_CTX'
graphics/copperspice incomplete type 'X509'
irc/bip incomplete type 'DH'
irc/bitchx SSLeay in -lcrypto
irc/eggdrop-devel undefined reference to `SSLeay_version'
irc/epic5 incomplete type 'EVP_CIPHER_CTX'
irc/ircd-ratbox-devel RAND_egd
irc/ircproxy SSL_library_init in -lssl
irc/irssi-fish incomplete type 'DH'
irc/libircclient SSL_library_init in -lssl
irc/ratbox-respond SSLeay_add_all_ciphers
japanese/jpilot OpenSSL library not found
japanese/mutt-devel incomplete type 'X509_STORE_CTX'
japanese/spamassassin SSL_CTX_free in -lssl
lang/erlang 'openssl/chacha.h' file not found PR225898 Patch
lang/erlang-runtime15 incomplete type 'HMAC_CTX'
lang/erlang-runtime16 incomplete type 'HMAC_CTX'
lang/erlang-runtime17 incomplete type 'HMAC_CTX'
lang/erlang-runtime18 'openssl/chacha.h' file not found
lang/erlang-runtime19 'openssl/chacha.h' file not found
lang/fth implicit declaration of function 'BN_CTX_init'
lang/phantomjs incomplete type 'X509' PR233962
lang/python27 incomplete definition of type 'struct X509_name_entry_st' PR222552 In ports
lang/python34 incomplete definition of type 'struct X509_name_entry_st' PR225882 In ports
lang/python34 incomplete definition of type 'struct X509_name_entry_st'
lang/python35 PR225870 In ports
lang/pyton36 incomplete definition of type 'struct X509_name_entry_st' PR225871 In ports
lang/rubinius checking for OpenSSL_add_all_digests() in -lcrypto… no
lang/ruby23 ssl.rb
mail/avenger SSL_get_cipher_version
mail/cclient PR225885 In ports
mail/courier bin/couriertls: No such file or directory
mail/elmo undefined reference to `OPENSSL_init_ssl'
mail/enma incomplete type 'EVP_PKEY'
mail/fdm SSL_library_init in -lssl
mail/heirloom-mailx undefined reference to `SSLv2_client_method'
mail/imapfilter incomplete type 'HMAC_CTX'
mail/isync undefined reference to symbol `X509_NAME_get_text_by_NID@@OPENSSL_1_1_0
mail/libdkim incomplete type 'EVP_MD_CTX'
mail/libdomainkeys incomplete type 'EVP_MD_CTX'
mail/libesmtp configure: error: cannot find the ssl library PR229017
mail/mutt14 incomplete type 'X509_STORE_CTX'
mail/mutt14-lite incomplete type 'X509_STORE_CTX'
mail/opendkim configure: checking for library containing SSL_library_init… No PR223568 Patch
mail/opensmtpd Your LibreSSL headers do not match your library PR228937
mail/opensmtpd-devel undeclared identifier 'SSL_F_SSL_CTX_USE_CERTIFICATE_CHAIN_FILE'
mail/panda-cclient incomplete type 'X509'
mail/popular undefined reference to `OPENSSL_init_ssl'
mail/postfix211 incomplete type 'DH'
mail/postfix211-sasl incomplete type 'X509'
mail/prayer incomplete definition of type 'struct ssl_session_st'
mail/qmail-ldap undefined reference to `BIO_s_file_internal'
mail/qmail-spamcontrol incomplete definition of type 'struct X509_name_st'
mail/qmail-tls incomplete type 'SSL'
mail/qpopper incomplete type 'SSL'
mail/spamassassin Cannot use SSL; libraries or header files are missing. PR228940
mail/spamd undefined reference to `HMAC_CTX_init'
mail/spamdyke SSL_library_init in -lssl
mail/up-imapproxy incomplete type 'X509_STORE_CTX'
misc/gimp-help-sv
misc/linm incomplete type 'EVP_CIPHER_CTX'
misc/smssend undefined reference to `SSL_library_init'
misc/urbit undefined reference to symbol `TLS_server_method@@OPENSSL_1_1_0'
multimedia/asdcplib incomplete type 'BIGNUM'
multimedia/gpac-mp4box undefined reference to `SSLeay_add_all_algorithms'
multimedia/rtmpdump undefined reference to `OpenSSL_add_all_digests' PR228939
net/bsdec2-image-upload undefined reference to `SSL_library_init'
net/dhcp6 y.tab.c: No such file or directory
net/easysoap use of undeclared identifier 'SSLv2_client_method'
net/freerdp1 incomplete type 'EVP_CIPHER_CTX'
net/freeswitch incomplete type 'EVP_CIPHER_CTX'
net/gq incomplete type 'X509'
net/gsk incomplete type 'BIO'
net/ipdecap EVP_CIPHER_CTX_init in -lcrypto
net/libarms incomplete type 'X509_STORE_CTX'
net/libexosip2 incomplete type 'SSL'
net/liboauth variable has incomplete type 'EVP_MD_CTX' PR225919 Patch
net/libsrtp incomplete type 'EVP_CIPHER_CTX' PR228866 In ports
net/megatools incomplete type 'RSA'
net/mosquitto incomplete type 'EVP_MD_CTX'
net/mpd5 OPENSSL_init_ssl
net/openldap-server PR225878 fixed in 2.4.45In ports
net/openvswitch incomplete type 'DH'
net/pipsecd 'idea.h' file not found
net/qt4-network member access into incomplete type 'X509' PR214691 Patch
net/radsecproxy incomplete type 'SSL'
net/rdesktop incomplete type 'BIGNUM' PR229029 Patch
net/relayd SSL_library_init
net/socketw incomplete type 'X509'
net/ss5 incomplete type 'DH'
net/ssltunnel-server incomplete type 'DH'
net/ssvnc incomplete type 'EVP_CIPHER_CTX'
net/stone incomplete definition of type 'struct ssl_session_st'
net/tcpflow SSL_library_init in -lssl
net/vde2 incomplete type 'EVP_CIPHER_CTX'
net/vtun incomplete type 'EVP_CIPHER_CTX'
net-im/climm incomplete type 'DH'
net-im/jabberd CRYPTO_lock in -lcrypto
net-im/libmesode incomplete type 'X509'
net-im/libqtelegram-ae incomplete type 'RSA'
net-im/licq incomplete type 'DH'
net-im/telegram incomplete type 'RSA'
net-im/telegram-desktop undeclared identifier 'AES_ctr128_encrypt'
net-mgmt/ccnet-server incomplete type 'EVP_CIPHER_CTX'
net-mgmt/ettercap incomplete definition of type 'struct X509_extension_st'
net-mgmt/icinga-core incomplete type 'DH'
net-mgmt/kismet incomplete type 'HMAC_CTX'
net-mgmt/net-snmp undefined reference to `EVP_MD_CTX_free' PR228898
net-mgmt/nsca-ng SSL_library_init in -lssl
net-mgmt/nsca-ng-client SSL_library_init in -lssl
net-mgmt/openbmp undefined reference to `SSL_library_init'
net-p2p/dclib incomplete type 'EVP_CIPHER_CTX'
net-p2p/eiskaltdcpp-lib incomplete type 'DH'
net-p2p/libswift incomplete type 'EVP_PKEY'
net-p2p/libtorrent incomplete type 'DH'
net-p2p/linuxdcpp incomplete type 'DH'
net-p2p/qtum incomplete type 'ECDSA_SIG'
net-p2p/transmission-cli incomplete type 'DH' PR225917 In ports
net-p2p/uhub incomplete type 'BIO'
net-p2p/zetacoin-nox11 RAND_egd in -lcrypto
palm/jpilot OpenSSL library not found
polish/ekg incomplete type 'EVP_MD_CTX'
polish/ekg2 incomplete type 'EVP_MD_CTX'
russian/ircd-hybrid incomplete type 'RSA'
security/acme-client incomplete type 'RSA'
security/apache-xml-security-c incomplete type 'HMAC_CTX' PR229022
security/botan110 incomplete type 'EVP_CIPHER_CTX' PR229030
security/bro incomplete type 'X509'
security/certificate-transparency SSL_CTX_new in -lssl
security/cyrus-sasl2 incomplete type 'EVP_MD_CTX' PR225891 In ports
security/d0_blind_id BN_Init
security/distcache SSL_CTX_new in -lssl
security/dsniff incomplete type 'RSA'
security/esteidfirefoxplugin incomplete definition of type 'struct X509_name_entry_st'
security/fbopenssl incomplete definition of type 'struct asn1_object_st'
security/git-crypt undefined reference to `HMAC_CTX_cleanup'
security/hpenc incomplete type 'EVP_CIPHER_CTX'
security/ike incomplete type 'EVP_CIPHER_CTX'
security/isakmpd incomplete type 'X509_STORE_CTX'
security/john incomplete type 'EVP_PKEY'
security/keynote incomplete type 'EVP_PKEY'
security/krb5 #include openssl/asn1_mac.h PR228900 In ports
security/krb5-114 asn1_mac.h
security/krb5-115 asn1_mac.h
security/krb5-116 asn1_mac.h
security/krb5-devel asn1_mac.h
security/libp11 lib/libp11.so.2.4.7:No such file or directory
security/libssh incomplete type 'EVP_MD_CTX' PR228895
security/libssh2 PR225873 In ports
security/medusa incomplete type 'DH'
security/ncrack OpenSSL's headers match the library… no
security/netpgp incomplete type 'RSA'
security/obfsclient ncomplete type 'EVP_CIPHER_CTX'
security/openca-tools-forked incomplete type 'X509_STORE_CTX'
security/opencryptoki incomplete type 'RSA'
security/openiked incomplete type 'EVP_MD_CTX'
security/openscep incomplete definition of type 'struct x509_attributes_st'
security/openssh-portable OpenSSL >= 1.1.0 is not yet supported
security/openssl_tpm_engine incomplete type 'RSA'
security/osiris undefined reference to `SHA_Init'
security/ossec-hids-client SSL_library_init
security/ossec-hids-local SSL_library_init
security/ossec-hids-server undefined reference to `SSLv23_method'
security/osslsigncode incomplete type 'EVP_MD_CTX'
security/p5-Crypt-OpenSSL-CA incomplete type 'EVP_PKEY'
security/p5-Crypt-OpenSSL-ECDSA unknown type name 'ECDSA_METHOD' PR228947
security/p5-Filter-Crypto incomplete type 'EVP_CIPHER_CTX'
security/p5-OpenCA-OpenSSL incomplete type 'X509'
security/pam_ocra undefined reference to `HMAC_CTX_init'
security/pam_ssh_agent_auth OpenSSL version check
security/pev incomplete type 'EVP_MD_CTX'
security/php56-openssl incomplete definition of type 'struct X509_extension_st' PR228897 Expires 2018-12
security/pkcs11-helper incomplete type 'RSA_METHOD'
security/pks incomplete type 'EVP_PKEY'
security/pvk OPENSSL_add_all_algorithms_noconf
security/py-m2crypto x86/_types.h:67: Error: Syntax error in input(1) PR229019
security/py-m2crypto@py36 x86/_types.h:67: Error: Syntax error in input(1).
security/py-pow incomplete type 'EVP_CIPHER_CTX'
security/racoon2 incomplete type 'EVP_MD_CTX'
security/ratproxy SSL_library_init
security/razorback-api incomplete definition of type 'struct rsa_st' PR228938
security/sslwrap incomplete type 'DH'
security/sst undefined reference to `SSLv2_server_method'
security/stud incomplete type 'SSL_CTX'
security/tcpcrypt incomplete type 'EVP_CIPHER_CTX'
security/titus incomplete type 'DH'
security/tlswrap undefined reference to `SSL_library_init'
security/xmlsec1 cannot find -ldl PR228893
security/yafic incomplete type 'EVP_MD_CTX'
security/yubico-piv-tool incomplete type 'RSA'
sysutils/aimage SSLv3
sysutils/bacula-client unknown type name 'IMPLEMENT_STACK_OF' PR229024
sysutils/bacula-client-static incomplete type 'EVP_MD_CTX'
sysutils/boxbackup incomplete type 'EVP_CIPHER_CTX'
sysutils/boxbackup-devel incomplete type 'EVP_CIPHER_CTX'
sysutils/cfengine incomplete type 'EVP_MD_CTX'
sysutils/cfengine22 incomplete type 'RSA'
sysutils/cfengine310 incomplete type 'EVP_MD_CTX'
sysutils/cfengine311 incomplete type 'EVP_MD_CTX'
sysutils/cfengine32 incomplete type 'RSA'
sysutils/cfengine33 incomplete type 'RSA'
sysutils/cfengine34 incomplete type 'RSA'
sysutils/cfengine35 incomplete type 'RSA'
sysutils/cfengine36 incomplete type 'EVP_MD_CTX'
sysutils/cfengine37 incomplete type 'EVP_MD_CTX'
sysutils/cfengine38 incomplete type 'EVP_MD_CTX'
sysutils/cfengine39 incomplete type 'EVP_MD_CTX'
sysutils/dmg2img incomplete type 'EVP_CIPHER_CTX'
sysutils/ipmitool incomplete type 'EVP_CIPHER_CTX'
sysutils/ori incomplete type 'EVP_MD_CTX'
sysutils/pam_mount incomplete type 'EVP_CIPHER_CTX'
sysutils/rsyncrypto incomplete type 'RSA'
sysutils/sbsigntool incomplete type 'X509'
sysutils/syslog-ng36 incomplete type 'X509_STORE_CTX'
sysutils/syslog-ng37 incomplete type 'X509_STORE_CTX'
sysutils/syslog-ng39 incomplete type 'X509_STORE_CTX'
sysutils/tlsdate incomplete type 'BIO'
textproc/htmldoc incomplete type 'BIO_METHOD' PR228944
www/aws SSLv3
www/blastbeat incomplete type 'SSL'
www/bozohttpd SSL_library_init
www/cherokee incomplete type 'DH'
www/elinks incomplete type 'SSL'
www/htdump SSL_library_init
www/httest incomplete type 'EVP_MD_CTX'
www/libwww configure: Could not find the /usr/local libraries. PR228943
www/links-hacked incomplete type 'SSL'
www/mod_auth_cas SSL_library_init in -lssl
www/mod_auth_pubtkt incomplete type 'EVP_PKEY'
www/mod_pagespeed incomplete definition of type 'struct bio_st'
www/mod_setenvifplus incomplete type 'EVP_CIPHER_CTX'
www/mod_webauth SSL_library_init in -lssl
www/neon could not find library containing SSL_library_init PR228867
www/nginx-full incomplete definition of type 'struct ssl_session_st'
www/node6 incomplete type 'SSL_CTX' PR229018
www/pound ???
www/qupzilla-qt5 incomplete type 'EVP_CIPHER_CTX'
www/resin3 Cannot find OpenSSL
www/trafficserver incomplete type 'DH'
www/ufdbguard incomplete type 'SSL'
www/webstone-ssl incomplete type 'SSL'
www/xshttpd incomplete type 'X509_STORE_CTX'
www/xshttpd-devel incomplete type 'EVP_CIPHER_CTX'

regular expression

'.*OPENSSL_VERSION_NUMBER[[:space:]]*[<>=]*[[:space:]]0x101'

Can probably be improved :D

www/aria2

$ echo "  CXXLD   " aria2c;/bin/sh ../libtool --silent --tag=CXX    --mode=link c++ -std=c++11   -pipe  -O2 -fno-strict-aliasing -pipe -march=native  -fstack-protector  -std=c++11 -Wl,-rpath,/usr/local/lib -fstack-protector -o aria2c main.o libaria2.la   
  CXXLD    aria2c
./.libs/libaria2.so: undefined reference to `OPENSSL_sk_pop_free'
./.libs/libaria2.so: undefined reference to `OPENSSL_sk_value'
./.libs/libaria2.so: undefined reference to `EVP_MD_CTX_reset'
./.libs/libaria2.so: undefined reference to `EVP_MD_CTX_new'
./.libs/libaria2.so: undefined reference to `OPENSSL_sk_num'
./.libs/libaria2.so: undefined reference to `OPENSSL_init_ssl'
./.libs/libaria2.so: undefined reference to `OPENSSL_init_crypto'
./.libs/libaria2.so: undefined reference to `EVP_MD_CTX_free'
./.libs/libaria2.so: undefined reference to `SSL_CTX_set_options'
c++: error: linker command failed with exit code 1 (use -v to see invocation)

vs

$ echo "  CXXLD   " aria2c;/bin/sh ../libtool --silent --tag=CXX    --mode=link c++ -std=c++11   -pipe  -O2 -fno-strict-aliasing -pipe -march=native  -fstack-protector  -std=c++11 -L/usr/local/lib -I/usr/local/include -Wl,-rpath,/usr/local/lib -fstack-protector -lcrypto -lssl -o aria2c main.o libaria2.la
  CXXLD    aria2c
/usr/bin/ld: warning: libcrypto.so.38, needed by ./.libs/libaria2.so, may conflict with libcrypto.so.9
/usr/bin/ld: warning: libssl.so.39, needed by ./.libs/libaria2.so, may conflict with libssl.so.9

Even though

SSL Support:    yes
AppleTLS:       no (LDFLAGS='')
WinTLS:         no (LIBS='')
GnuTLS:         no (CFLAGS='' LIBS='')
OpenSSL:        yes (CFLAGS='-I/usr/local/include' LIBS='-L/usr/local/lib -lcrypto -lssl')

  • openssl/1.1.0.txt
  • Last modified: 2019/03/07 13:29
  • by DanLangille