Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 17 Jul 2020 17:10:23 +0000
From:      bugzilla-noreply@freebsd.org
To:        ports-bugs@FreeBSD.org
Subject:   [Bug 248049] security/yubico-piv-tool: Fails to build under 11.3-RELEASE with DEFAULT_VERSIONS=ssl=openssl
Message-ID:  <bug-248049-7788@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D248049

            Bug ID: 248049
           Summary: security/yubico-piv-tool: Fails to build under
                    11.3-RELEASE with DEFAULT_VERSIONS=3Dssl=3Dopenssl
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: ume@FreeBSD.org
          Reporter: leres@freebsd.org
          Assignee: ume@FreeBSD.org
             Flags: maintainer-feedback?(ume@FreeBSD.org)

>From the poudriere build log:

    /usr/local/libexec/ccache/cc -O2 -pipe  -fstack-protector-strong
-fno-strict-aliasing -w -Wall -Wextra -Werror -Wshadow -Wwrite-strings
-Wmissing-prototypes -Wbad-function-cast -pedantic -fstack-protector-all
-std=3Dc99 -Wshorten-64-to-32 -O2 -pipe  -fstack-protector-strong
-fno-strict-aliasing   -Wl,-rpath,/usr/local/lib -fstack-protector-strong
CMakeFiles/yubico-piv-tool.dir/yubico-piv-tool.c.o
CMakeFiles/yubico-piv-tool.dir/cmdline.c.o  -o yubico-piv-tool=20
-Wl,-rpath,/wrkdirs/usr/ports/security/yubico-piv-tool/work/.build/lib:
-L/usr/local/lib -lcrypto -L/usr/local/lib -pthread ../lib/libykpiv.so.2.1.0
-lpcsclite=20
    CMakeFiles/yubico-piv-tool.dir/yubico-piv-tool.c.o: In function `main':
    yubico-piv-tool.c:(.text+0x401): undefined reference to
`OPENSSL_add_all_algorithms_noconf'
    yubico-piv-tool.c:(.text+0x1bde): undefined reference to
`EVP_MD_CTX_create'
    yubico-piv-tool.c:(.text+0x1c6f): undefined reference to
`EVP_MD_CTX_destroy'
    yubico-piv-tool.c:(.text+0x2a1b): undefined reference to `sk_new_null'
    yubico-piv-tool.c:(.text+0x31dc): undefined reference to `sk_pop_free'
    yubico-piv-tool.c:(.text+0x356d): undefined reference to `sk_pop_free'
    yubico-piv-tool.c:(.text+0x4774): undefined reference to
`EVP_MD_CTX_create'
    yubico-piv-tool.c:(.text+0x4849): undefined reference to
`EVP_MD_CTX_destroy'
    yubico-piv-tool.c:(.text+0x4be2): undefined reference to `EVP_cleanup'
    CMakeFiles/yubico-piv-tool.dir/yubico-piv-tool.c.o: In function `add_ex=
t':
    yubico-piv-tool.c:(.text+0x4cb5): undefined reference to `sk_push'

r541879 adds a patch that disables an openssl cmake module from being invok=
ed.
But on 11.3 at least if some other package dependency pulls in openssl,
yubico-piv-tool is built with openssl 1.0 includes from base and openssl 1.1
libraries from the port.

This is not a compile time problem on 12.1 because the base version of open=
ssl
is 1.1 (but there is no guarantee there are not other issues caused by the
mixing of includes and libraries).

I think yubico-piv-tool needs to always run the cmake libcrypt checks in ca=
se
openssl is installed in /usr/local. The patch replaces patch-CMakeLists.txt=
 and
makes the cmake checks for libcrypto optional.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-248049-7788>