Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 08 Oct 2016 00:42:28 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 213301] security/xmlsec1: Fix libxmlsec-openssl when building with LibreSSL
Message-ID:  <bug-213301-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D213301

            Bug ID: 213301
           Summary: security/xmlsec1: Fix libxmlsec-openssl when building
                    with LibreSSL
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: patch
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: johans@FreeBSD.org
          Reporter: grembo@FreeBSD.org
                CC: brnrd@freebsd.org
             Flags: maintainer-feedback?(johans@FreeBSD.org)
          Assignee: johans@FreeBSD.org

Created attachment 175523
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D175523&action=
=3Dedit
Simple patch to stop configure detecting libressl as openssl 1.1.0

The configure script determines the OpenSSL version used based on
OPENSSL_VERSION >=3D X. In case of LibreSSL, X is 0x20000000L, so configure
assumes the OPENSSL_VERSION to be 1.10 and then makes assumptions about the
existence of various functions like X509_REVOKED_get0_serialNumber and
EVP_CIPHER_CTX_encrypting.

This only hits one when linking against libxmlsec1-openssl.so, in which case
you'll see errors like this one:
/usr/local/lib/libxmlsec1-openssl.so: undefined reference to
`EVP_CIPHER_CTX_encrypting'

The attached patch is checks if libressl is used and if yes, fall through to
openssl 1.0.0 detection, which makes sure that xmlsec puts proper macros in
place.

(it's not clear why the library builds in the first place, it's probably
pulling in headers from base OpenSSL. I didn't investigate this any further=
, as
the result seemed to work ok).

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-213301-13>