Contents
Introduces OpenSSL 1.1 API Replace defined(LIBRESSL_VERSION_NUMBER) with (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x20700000L)
Status
category/port |
Problem |
Ports Status |
Upstream status/Comment |
archivers/libarchive |
1.1 API |
||
audio/vamp-plugin-sdk |
|
|
|
databases/freetds |
1.1 API |
||
databases/freetds-devel |
|
|
|
databases/mongodb34 |
1.1 API |
||
databases/mongodb36 |
1.1 API |
||
databases/mysac |
|
|
|
databases/mysql56-server |
|
||
databases/pecl-mongodb |
|
|
|
databases/pecl-mongodb@php70 |
|
|
|
databases/pecl-mongodb@php71 |
|
|
|
databases/pecl-mongodb@php72 |
|
|
|
databases/ruby-mysql |
|
|
|
databases/sqlcipher |
|
|
|
deskutils/spice-gtk |
|
|
|
devel/grpc |
|
||
devel/libevent |
1.1 API |
||
devel/libgit2 |
1.1 API |
||
devel/mongo-c-driver |
|
|
|
dns/bind910 |
|
|
bind912 patch applies |
dns/bind911 |
|
|
bind912 patch applies |
dns/bind912 |
1.1 API |
||
dns/bind99 |
|
|
bind912 patch applies |
dns/bind9-devel |
|
|
bind912 patch applies |
dns/bind-tools |
|
Slave-port of bind912In ports |
|
dns/powerdns |
1.1 API |
||
dns/powerdns-recursor |
1.1 API |
||
dns/powerdns-recursor40 |
1.1 API |
||
emulators/virtualbox |
|
|
|
ftp/curl |
1.1 API |
||
games/tinymux |
|
|
|
games/tome4 |
|
|
|
irc/irssi |
1.1 API |
||
lang/erlang-runtime20 |
|
||
lang/python27 |
1.1 API |
||
lang/python35 |
1.1 API |
||
lang/python36 |
1.1 API |
Review D14837 Fixed in 3.6.5In ports |
|
lang/ruby24 |
1.1 API |
||
lang/ruby25 |
1.1 API |
||
lang/rust |
|
|
|
lang/rust-nightly |
|
|
|
mail/cyrus-imapd24 |
|
||
mail/cyrus-imapd25 |
|
||
mail/cyrus-imapd30 |
|
||
mail/sendmail |
|
||
multimedia/winff |
|
|
|
net/haproxy |
|
Patches upstreamed via mail |
|
net/hostapd |
|
||
net/netatalk3 |
|
||
net/nuster |
|
|
|
net/openldap24-server |
|
||
net/qt4-network |
|
|
|
net/qt5-network |
1.1 API |
||
net-mgmt/seafile-server |
|
|
|
net-mgmt/sx |
|
||
net-mgmt/zabbix32-proxy |
PSK |
|
|
net-mgmt/zabbix32-server |
PSK |
|
|
net-mgmt/zabbix34-proxy |
PSK |
|
|
net-mgmt/zabbix34-server |
PSK |
|
|
net-mgmt/zabbix3-proxy |
PSK |
|
|
net-mgmt/zabbix3-server |
PSK |
|
|
net-p2p/transmission-cli |
|
||
net-p2p/transmission-daemon |
|
Slave-port of transmission-cliIn ports |
|
net-p2p/transmission-qt5 |
|
Slave-port of transmission-cliIn ports |
|
security/duo |
|
|
|
security/krb5 |
build regression |
||
security/openconnect |
|
|
|
security/opensc |
|
|
|
security/openvpn |
|
2.4.6 |
|
security/php70-openssl |
1.1 API |
php72 patch appliesIn ports |
|
security/php71-openssl |
1.1 API |
php72 patch appliesIn ports |
|
security/php72-openssl |
1.1 API |
||
security/py-cryptography |
1.1 API |
||
security/py-cryptography@py36 |
1.1 API |
||
security/rubygem-openssl |
|
|
|
security/stunnel |
1.1 API & 2.6 regression |
|
|
security/trousers |
|
||
security/wpa_supplicant |
|
||
security/xmlsec1 |
1.1 API |
||
sysutils/bacula9-client |
1.1 API |
|
|
sysutils/pcbsd-utils |
|
|
|
textproc/erlang-fast_xml |
|
|
|
textproc/rubygem-github-linguist |
|
|
|
www/apache24 |
1.1 API |
||
www/aria2 |
|
||
www/h2o |
|
||
www/nghttp2 |
1.1 API |
||
www/sogo3 |
|
|
Bulk builds
Initial bulk builds
Initially, a full bulk build was run with security/libressl 2.6.4 so it could be compared with the failures of the security/libressl-devel 2.7.0 bulk build.<<BR> LibreSSL 2.6.4 reference poudriere logs
LibreSSL 2.7.0 first full build logs
OpenSSL 1.1 API
Looks like failure is triggered on clang 6 and later. Reported by Daniel Stenberg of cURL and Kris Moore of TrueOS for Apache 2.4.33.
cURL failure
Observed on MacOS by Daniel Stenberg on Apple MacOS
vtls/openssl.c:2805:35: error: passing 'const X509_ALGOR *' (aka 'const struct X509_algor_st *') to parameter of type 'X509_ALGOR *' (aka 'struct X509_algor_st *') discards qualifiers [-Werror,-Wincompatible-pointer-types-discards-qualifiers] X509_signature_print(mem, palg, a); ^~~~ /usr/local/Cellar/libressl/2.7.2/include/openssl/x509.h:670:46: note: passing argument to parameter 'alg' here int X509_signature_print(BIO *bp,X509_ALGOR *alg, ASN1_STRING *sig); ^ 1 error generated.
Fixed with openssl: provide defines for argument typecasts to build warning-free
Apache 2.4 failure
Observed by Kris Moore of TrueOS on FreeBSD 12-STABLE (i.e. TrueOS) which has clang 6.
--- ssl_engine_vars.slo --- ssl_engine_vars.c:536:25: error: passing 'const ASN1_OBJECT **' (aka 'const struct asn1_object_st **') to parameter of type 'ASN1_OBJECT **' (aka 'struct asn1_object_st **') discards qualifiers in nested pointer types [-Werror,-Wincompatible-pointer-types-discards-qualifiers] X509_ALGOR_get0(&paobj, NULL, NULL, X509_get0_tbs_sigalg(xs)); ^~~~~~ /usr/include/openssl/x509.h:774:36: note: passing argument to parameter 'paobj' here void X509_ALGOR_get0(ASN1_OBJECT **paobj, int *pptype, void **ppval, ^ ssl_engine_vars.c:536:45: error: passing 'const X509_ALGOR *' (aka 'const struct X509_algor_st *') to parameter of type 'X509_ALGOR *' (aka 'struct X509_algor_st *') discards qualifiers [-Werror,-Wincompatible-pointer-types-discards-qualifiers] X509_ALGOR_get0(&paobj, NULL, NULL, X509_get0_tbs_sigalg(xs)); ^~~~~~~~~~~~~~~~~~~~~~~~ /usr/include/openssl/x509.h:775:19: note: passing argument to parameter 'algor' here X509_ALGOR *algor); ^ 2 errors generated.
Work-around: Set CFLAGS+= -Wno-incompatible-pointer-types-discards-qualifiers in port Makefile.