git: 6fbfa31c0a52 - main - security/pkcs11-tools: Properly set BROKEN on 11.x with OpenSSL 1.0.x

[Tobias Kortkamp]

The branch main has been updated by tobik:

URL: https://cgit.FreeBSD.org/ports/commit/?id=6fbfa31c0a52e3c89a8382042faf7f0abdbf2e57

commit 6fbfa31c0a52e3c89a8382042faf7f0abdbf2e57
Author:     Tobias Kortkamp <tobik at FreeBSD.org>
AuthorDate: 2021-04-21 10:10:36 +0000
Commit:     Tobias Kortkamp <tobik at FreeBSD.org>
CommitDate: 2021-04-21 10:57:20 +0000

    security/pkcs11-tools: Properly set BROKEN on 11.x with OpenSSL 1.0.x
    
    Another case of wishful thinking.  In reality the framework does
    not support a BROKEN_SSL_11 at the moment.
    
    Reported by:    portscan
---
 security/pkcs11-tools/Makefile | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/security/pkcs11-tools/Makefile b/security/pkcs11-tools/Makefile
index cc911ba91321..64301c8ef3a7 100644
--- a/security/pkcs11-tools/Makefile
+++ b/security/pkcs11-tools/Makefile
@@ -8,8 +8,6 @@ COMMENT=	Tools for managing PKCS11 cryptographic tokens
 
 LICENSE=	APACHE20
 
-BROKEN_SSL_11=			base
-BROKEN_SSL_11_REASON_base=	OpenSSL version is too old, lacks symbols: error: use of undeclared identifier 'EVP_PKEY_X25519', etc.
 BROKEN_SSL=			libressl
 BROKEN_SSL_REASON_libressl=	error: use of undeclared identifier 'EVP_PKEY_X25519' (LibreSSL has no support for Edwards curves)
 
@@ -35,6 +33,12 @@ LDFLAGS+=	${OPENSSLBASE}/lib/libcrypto.a # -lcrypto # fails to find symbol in th
 
 INSTALL_TARGET=	install-strip
 
+.include <bsd.port.options.mk>
+
+.if ${SSL_DEFAULT} == base && ${OPSYS} == FreeBSD && ${OSVERSION} < 1200085
+BROKEN=	OpenSSL version is too old, lacks symbols: error: use of undeclared identifier 'EVP_PKEY_X25519', etc.
+.endif
+
 post-extract:
 	@${RMDIR} ${WRKSRC}/.gnulib ${WRKSRC}/include/oasis-pkcs11
 	@${MV} ${WRKSRC_gnulib} ${WRKSRC}/.gnulib