Libressl >=2.3.0 have removed support for ssl 3 (specifically the function SSLv3_client_method() is missing) and for sha0 (specifically the function EVP_sha() is missing). Upstream has (mostly) patched the issue in git, but has not done a release. I filed an upstream bug to remove sha0 from the list of available hashes: KDE bug 358515 (https://bugs.kde.org/show_bug.cgi?id=358515) Reproducible: Always Steps to Reproduce: 1. Install >=libressl-2.3.0 (tested with 2.3.1-r1) 2. Attempt to install app-crypt/qca-2.1.1 3. Breakage Actual Results: Fails to compile Expected Results: Compiles and installs. # emerge --info Portage 2.2.26 (python 3.4.3-final-0, default/linux/amd64/13.0/desktop, gcc-4.9.3, glibc-2.21-r1, 4.4.0-gentoo-r1 x86_64) ================================================================= System uname: Linux-4.4.0-gentoo-r1-x86_64-Intel-R-_Core-TM-_i5-4570_CPU_@_3.20GHz-with-gentoo-2.2 KiB Mem: 23532308 total, 20906788 free KiB Swap: 0 total, 0 free Timestamp of repository gentoo: Thu, 28 Jan 2016 03:00:01 +0000 sh bash 4.3_p42-r1 ld GNU ld (Gentoo 2.25.1 p1.1) 2.25.1 app-shells/bash: 4.3_p42-r1::gentoo dev-java/java-config: 2.2.0::gentoo dev-lang/perl: 5.20.2::gentoo dev-lang/python: 2.7.11-r2::gentoo, 3.4.3-r7::gentoo dev-util/cmake: 3.3.1-r1::gentoo dev-util/pkgconfig: 0.28-r2::gentoo sys-apps/baselayout: 2.2::gentoo sys-apps/openrc: 0.19.1::gentoo sys-apps/sandbox: 2.10-r1::gentoo sys-devel/autoconf: 2.13::gentoo, 2.69::gentoo sys-devel/automake: 1.11.6-r1::gentoo, 1.14.1::gentoo, 1.15::gentoo sys-devel/binutils: 2.25.1-r1::gentoo sys-devel/gcc: 4.9.3::gentoo, 5.3.0::gentoo sys-devel/gcc-config: 1.7.3::gentoo sys-devel/libtool: 2.4.6::gentoo sys-devel/make: 4.1-r1::gentoo sys-kernel/linux-headers: 4.3::gentoo (virtual/os-headers) sys-libs/glibc: 2.21-r1::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 eclass-overrides: maurerpe crossdev location: /usr/local/overlay/crossdev masters: gentoo priority: 10 eclass-overrides: maurerpe maurerpe location: /usr/local/overlay/maurerpe masters: gentoo priority: 11 eclass-overrides: maurerpe gentoo-mate location: /var/lib/layman/gentoo-mate masters: gentoo priority: 50 eclass-overrides: maurerpe libressl location: /var/lib/layman/libressl masters: gentoo priority: 50 eclass-overrides: maurerpe vaca location: /var/lib/layman/vaca masters: gentoo priority: 50 eclass-overrides: maurerpe ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/lib64/libreoffice/program/sofficerc /usr/share/config /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/usr/portage/distfiles" FCFLAGS="-march=native -O2 -pipe" FEATURES="assume-digests binpkg-logs config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync news parallel-fetch preserve-libs protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr" FFLAGS="-march=native -O2 -pipe" GENTOO_MIRRORS="http://lug.mtu.edu/gentoo/ http://mirrors.rit.edu/gentoo/ http://gentoo.cites.uiuc.edu/pub/gentoo/" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" MAKEOPTS="-j5" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" USE="X a52 aac acl acpi alsa amd64 berkdb branding bzip2 cairo cdda cdio cdr cgroups cli colordiff consolekit cracklib crypt cups cxx dbus dri dts dvd dvdr dvi egl emacs emboss emerald encode evdev exif fam ffmpeg firefox flac fontconfig fortran gdbm gif gimp gpm gtk gtk3 iconv icu introspection ipv6 jpeg latex lcms libnotify libressl libsamplerate logrotate lzma mad minizip mmx mmxext mng modules mp3 mp4 mpeg multilib ncurses nls nptl ogg openexr opengl openmp pam pango pcre pcre16 pdf png policykit postscript ppds pulseaudio python qt3support qt4 qt5 raw readline sbcl sdl seccomp session smp spell sqlite sse sse2 ssl startup-notification svg tcpd theora threads tiff truetype udev unicode urandom usb vaapi vorbis vpx webp wxwidgets x264 x265 xattr xcb xetex xft xml xpm xps xv xvid zlib" ABI_X86="64" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump author" CAMERAS="ptp2 canon" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 fma3 mmx mmxext popcnt sse sse2 sse3 sse4_1 sse4_2 ssse3" CURL_SSL="libressl" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="keyboard mouse evdev joystick evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="en_US en" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-5" PYTHON_SINGLE_TARGET="python2_7" PYTHON_TARGETS="python3_4 python2_7" RUBY_TARGETS="ruby20 ruby21" SANE_BACKENDS="hp" USERLAND="GNU" VIDEO_CARDS="vesa intel i965" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" USE_PYTHON="2.7" Unset: CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Created attachment 424138 [details] qca-2.1.1-libressl.patch Combination of upstream commited patches for >=libressl-2.3.0 and my proposed patch from upstream bug 358515.
Created attachment 424140 [details] qca-2.1.1.ebuild.diff Update to ebuild to apply libressl patch.
The patch uses #define and cmakelists to ensure that operation with openssl and <libressl-2.3.0 is unaffected.
I can't find this commit in the upstream repo. Please send the patch to upstream (for example through https://git.reviewboard.kde.org) and link here back.
(In reply to Johannes Huber from comment #4) > I can't find this commit in the upstream repo. Please send the patch to > upstream (for example through https://git.reviewboard.kde.org) and link here > back. Nevermind, i found the upstream commits. I will add them with metadata included.
Delta Project <delta@lists.affinix.com> is the right contact.
Thanks. https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=48dfd5bed3c6b04af0752d085f0e852a1dd1d13f
