From nobody Tue Aug 15 09:35:09 2023 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4RQ5j66YCbz4TlCl for ; Tue, 15 Aug 2023 09:35:22 +0000 (UTC) (envelope-from guru@unixarea.de) Received: from ms-10.1blu.de (ms-10.1blu.de [178.254.4.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4RQ5j53ZqMz3CBs for ; Tue, 15 Aug 2023 09:35:21 +0000 (UTC) (envelope-from guru@unixarea.de) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of guru@unixarea.de designates 178.254.4.101 as permitted sender) smtp.mailfrom=guru@unixarea.de; dmarc=none Received: from [188.174.58.23] (helo=localhost.unixarea.de) by ms-10.1blu.de with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qVqSM-0002Ql-Oo for freebsd-current@freebsd.org; Tue, 15 Aug 2023 11:35:19 +0200 Received: from localhost.my.domain (localhost [127.0.0.1]) by localhost.unixarea.de (8.16.1/8.14.9) with ESMTPS id 37F9ZB67009554 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NO) for ; Tue, 15 Aug 2023 11:35:11 +0200 (CEST) (envelope-from guru@unixarea.de) Received: (from guru@localhost) by localhost.my.domain (8.16.1/8.14.9/Submit) id 37F9Z90l009553 for freebsd-current@freebsd.org; Tue, 15 Aug 2023 11:35:09 +0200 (CEST) (envelope-from guru@unixarea.de) X-Authentication-Warning: localhost.my.domain: guru set sender to guru@unixarea.de using -f Date: Tue, 15 Aug 2023 11:35:09 +0200 From: Matthias Apitz To: freebsd-current@freebsd.org Subject: Re: security/openvpn does not compile in 14-CURRENT w/ poudriere Message-ID: Reply-To: Matthias Apitz Mail-Followup-To: freebsd-current@freebsd.org References: List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-Operating-System: FreeBSD 13.0-CURRENT r368166 (amd64) X-message-flag: Mails containing HTML will not be read! Please send only plain text. X-Con-Id: 51246 X-Con-U: 0-guru X-Originating-IP: 188.174.58.23 X-Spamd-Result: default: False [-2.53 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.73)[-0.734]; MID_RHS_NOT_FQDN(0.50)[]; R_SPF_ALLOW(-0.20)[+ip4:178.254.4.101]; MIME_GOOD(-0.10)[text/plain]; DMARC_NA(0.00)[unixarea.de]; ASN(0.00)[asn:42730, ipnet:178.254.0.0/19, country:DE]; FROM_EQ_ENVFROM(0.00)[]; ARC_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; MLMMJ_DEST(0.00)[freebsd-current@freebsd.org]; R_DKIM_NA(0.00)[]; TO_DN_NONE(0.00)[]; RCVD_COUNT_THREE(0.00)[3]; FROM_HAS_DN(0.00)[]; HAS_XOIP(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; RCVD_TLS_LAST(0.00)[]; REPLYTO_EQ_FROM(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[freebsd-current@freebsd.org]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; HAS_XAW(0.00)[]; HAS_REPLYTO(0.00)[guru@unixarea.de] X-Spamd-Bar: -- X-Rspamd-Queue-Id: 4RQ5j53ZqMz3CBs El día martes, agosto 15, 2023 a las 08:16:38a. m. +0200, Matthias Apitz escribió: > > security/openvpn fails to build with an error message in the log: > > ... > libc.so.7 > libcrypto.so.11 > libcrypto.so.30 > libdl.so.1 > liblz4.so.1 > liblzo2.so.2 > libnv.so.1 > libpkcs11-helper.so.1 > libssl.so.11 > libthr.so.3 > /usr/ports/security/openvpn FAILED: either of libssl libcrypto libraries linked multiple times > *** Error code 1 > > The full log is at http://www.unixarea.de/openvpn-2.6.5.log > > The job uses via make.conf the SSL from the base: > > ---Begin OPTIONS List--- > ===> The following configuration options are available for openvpn-2.6.5: > ASYNC_PUSH=off: Enable async-push support > DCO=on: Build with Data Channel Offload (ovpn(4)) support > DOCS=on: Build and/or install documentation > EASYRSA=on: Install security/easy-rsa RSA helper package > EXAMPLES=on: Build and/or install examples > LZ4=on: LZ4 compression support > LZO=on: LZO compression (incompatible with LibreSSL) > PKCS11=on: Use security/pkcs11-helper, needs same SSL lib! > SMALL=off: Build a smaller executable with fewer features > TEST=on: Build and/or run tests > UNITTESTS=off: Enable unit tests > X509ALTUSERNAME=off: Enable --x509-username-field > ===> Use 'make config' to modify these settings > ---End OPTIONS List--- > > --MAKE_ENV-- > OPENSSLBASE=/usr OPENSSLDIR=/etc/ssl OPENSSLINC=/usr/include OPENSSLLIB=/usr/lib ... > > There is a similar, but closed PR: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254323 > I've unset PKCS11 in the port's option: # cat /usr/local/etc/poudriere.d/140-CURRENT-options/security_openvpn/options # This file is auto-generated by 'make config'. # Options for openvpn-2.6.5 _OPTIONS_READ=openvpn-2.6.5 _FILE_COMPLETE_OPTIONS_LIST=ASYNC_PUSH DCO DOCS EASYRSA EXAMPLES LZ4 LZO PKCS11 SMALL TEST UNITTESTS X509ALTUSERNAME OPTIONS_FILE_UNSET+=ASYNC_PUSH OPTIONS_FILE_SET+=DCO OPTIONS_FILE_SET+=DOCS OPTIONS_FILE_SET+=EASYRSA OPTIONS_FILE_SET+=EXAMPLES OPTIONS_FILE_SET+=LZ4 OPTIONS_FILE_SET+=LZO OPTIONS_FILE_UNSET+=PKCS11 ^^^^^^^^^^^^^^^^^^^^^^^^^^ OPTIONS_FILE_UNSET+=SMALL OPTIONS_FILE_SET+=TEST OPTIONS_FILE_UNSET+=UNITTESTS OPTIONS_FILE_UNSET+=X509ALTUSERNAME With this it builds fine. matthias -- Matthias Apitz, ✉ guru@unixarea.de, http://www.unixarea.de/ +49-176-38902045 Public GnuPG key: http://www.unixarea.de/key.pub