[Bug 213301] security/xmlsec1: Fix libxmlsec-openssl when building with LibreSSL

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Oct 8 00:42:28 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213301

            Bug ID: 213301
           Summary: security/xmlsec1: Fix libxmlsec-openssl when building
                    with LibreSSL
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Keywords: patch
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: johans at FreeBSD.org
          Reporter: grembo at FreeBSD.org
                CC: brnrd at freebsd.org
             Flags: maintainer-feedback?(johans at FreeBSD.org)
          Assignee: johans at FreeBSD.org

Created attachment 175523
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=175523&action=edit
Simple patch to stop configure detecting libressl as openssl 1.1.0

The configure script determines the OpenSSL version used based on
OPENSSL_VERSION >= X. In case of LibreSSL, X is 0x20000000L, so configure
assumes the OPENSSL_VERSION to be 1.10 and then makes assumptions about the
existence of various functions like X509_REVOKED_get0_serialNumber and
EVP_CIPHER_CTX_encrypting.

This only hits one when linking against libxmlsec1-openssl.so, in which case
you'll see errors like this one:
/usr/local/lib/libxmlsec1-openssl.so: undefined reference to
`EVP_CIPHER_CTX_encrypting'

The attached patch is checks if libressl is used and if yes, fall through to
openssl 1.0.0 detection, which makes sure that xmlsec puts proper macros in
place.

(it's not clear why the library builds in the first place, it's probably
pulling in headers from base OpenSSL. I didn't investigate this any further, as
the result seemed to work ok).

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list