Created attachment 536046 [details, diff] Fix LibreSSL 2.7 Because LibreSSL introduced several new APIs to the upstream, net-libs/neon-0.30.2 cannot be built with LibreSSL 2.7 successfully due to the redefinition of X509_up_ref, EVP_PKEY_up_ref, EVP_PKEY_get0_RSA, RSA_meth_free, etc. The attached patch fixes the issue.
for me the neon compiles without above patch: --- # qlist -Iv libressl dev-libs/libressl-2.7.4 # emerge -1 net-libs/neon These are the packages that would be merged, in order: Calculating dependencies .... .. .... done! [ebuild R ] net-libs/neon-0.30.2:0/27::gentoo USE="-doc expat -gnutls -kerberos -libproxy libressl nls -pkcs11 ssl -static-libs zlib" ABI_X86="32 (64) (-x32)" 0 KiB Total: 1 package (1 reinstall), Size of downloads: 0 KiB Would you like to merge these packages? [Yes/No] y >>> Verifying ebuild manifests >>> Emerging (1 of 1) net-libs/neon-0.30.2::gentoo >>> Installing (1 of 1) net-libs/neon-0.30.2::gentoo >>> Jobs: 1 of 1 complete Load avg: 4.67, 3.35, 3.97 >>> Auto-cleaning packages... ---
Try enable the "pkcs11" flag.
Cannot reproduce with LibreSSL 2.8.3. Does this bug still exist? If so, could you please attach build logs and your exact use flags ("emerge -pqv '=net-libs/neon-0.30.2::gentoo'") and system configuration ("emerge --info")?
Created attachment 567724 [details] testcase fails to build with libressl-2.8.3 and gcc-8.3.0 when pkcs11 useflag is set.
emerge --info Portage 2.3.51 (python 3.6.5-final-0, default/linux/amd64/17.0/hardened, gcc-8.3.0, glibc-2.27-r6, 4.19.26-gentoocryptZ x86_64) ================================================================= System uname: Linux-4.19.26-gentoocryptZ-x86_64-AMD_FX-tm-8350_Eight-Core_Processor-with-gentoo-2.6 KiB Mem: 31266848 total, 20255524 free KiB Swap: 34603004 total, 34603004 free Timestamp of repository gentoo: Mon, 04 Mar 2019 03:00:01 +0000 Head commit of repository gentoo: e2d5c56450b953372bcff4792994a9df3665c66d sh bash 4.4_p23-r1 ld GNU ld (Gentoo 2.30 p5) 2.30.0 app-shells/bash: 4.4_p23-r1::gentoo dev-java/java-config: 2.2.0-r4::gentoo dev-lang/perl: 5.26.2::gentoo dev-lang/python: 2.7.15::gentoo, 3.6.5::gentoo dev-util/cmake: 3.9.6::gentoo dev-util/pkgconfig: 0.29.2::gentoo sys-apps/baselayout: 2.6-r1::gentoo sys-apps/openrc: 0.38.3-r1::gentoo sys-apps/sandbox: 2.13::gentoo sys-devel/autoconf: 2.13-r1::gentoo, 2.69-r4::gentoo sys-devel/automake: 1.11.6-r3::gentoo, 1.16.1-r1::gentoo sys-devel/binutils: 2.30-r4::gentoo sys-devel/gcc: 8.3.0::gentoo sys-devel/gcc-config: 2.0::gentoo sys-devel/libtool: 2.4.6-r3::gentoo sys-devel/make: 4.2.1-r4::gentoo sys-kernel/linux-headers: 4.14-r1::gentoo (virtual/os-headers) sys-libs/glibc: 2.27-r6::gentoo Repositories: gentoo location: /usr/portage sync-type: rsync sync-uri: rsync://rsync.gentoo.org/gentoo-portage priority: -1000 sync-rsync-verify-metamanifest: no sync-rsync-verify-max-age: 24 sync-rsync-extra-opts: sync-rsync-verify-jobs: 1 x-portage location: /usr/local/portage masters: gentoo priority: 0 libressl location: /var/lib/layman/libressl masters: gentoo priority: 50 science location: /var/lib/layman/science masters: gentoo priority: 50 ACCEPT_KEYWORDS="amd64" ACCEPT_LICENSE="* -@EULA" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=native -O2 -pipe" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/gnupg/qualified.txt" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php7.2/ext-active/ /etc/php/cgi-php7.2/ext-active/ /etc/php/cli-php7.2/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/texmf/language.dat.d /etc/texmf/language.def.d /etc/texmf/updmap.d /etc/texmf/web2c" CXXFLAGS="-march=native -O2 -pipe" DISTDIR="/usr/portage/distfiles" ENV_UNSET="DBUS_SESSION_BUS_ADDRESS DISPLAY GOBIN PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR" FCFLAGS="-O2 -pipe" FEATURES="assume-digests binpkg-logs buildpkg config-protect-if-modified distlocks ebuild-locks fixlafiles merge-sync multilib-strict news nostrip parallel-fetch preserve-libs protect-owned sandbox sfperms split-elog strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync webrsync-gpg xattr" FFLAGS="-O2 -pipe" GENTOO_MIRRORS=" http://ftp-stud.hs-esslingen.de/pub/Mirrors/gentoo/ http://ftp.heanet.ie/pub/gentoo/" LANG="en_US.utf8" LDFLAGS="-Wl,-O1 -Wl,--as-needed" LINGUAS="en en_US" MAKEOPTS="-j5" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git" PORTAGE_TMPDIR="/var/tmp" USE="X acl amd64 bzip2 consolekit crypt custom-cflags custom-optimization custom-optimizations cxx doc hardened hwaccel iconv ipv6 libressl libtirpc multilib ncurses nls nptl openmp pam pcre pie policykit pulseaudio readline seccomp ssl ssp unicode xattr xtpax zlib" ABI_X86="64 32" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx f16c fma3 fma4 mmx mmxext pclmul popcnt sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 xop" CURL_SSL="libressl" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" GRUB_PLATFORMS="efi-64 pc multiboot qemu xen" INPUT_DEVICES="libinput" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" NETBEANS_MODULES="apisupport cnd groovy gsf harness ide identity j2ee java mobility nb php profiler soa visualweb webcommon websvccommon xml" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php5-6 php7-1" POSTGRES_TARGETS="postgres9_5 postgres10" PYTHON_SINGLE_TARGET="python3_6" PYTHON_TARGETS="python2_7 python3_6" QEMU_SOFTMMU_TARGETS="x86_64 arm" QEMU_USER_TARGETS="aarch64 aarch64_be arm armeb i386 x86_64" RUBY_TARGETS="ruby24" USERLAND="GNU" VIDEO_CARDS="amdgpu radeonsi" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CC, CPPFLAGS, CTARGET, CXX, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS
Created attachment 567726 [details] environment file
Created attachment 567728 [details] Build Log.
Created attachment 567730 [details] successful-build-log-with-proposed-patch
builds fine with LibreSSL-2.9.1 and the pkcs11 useflag on amd64.
Summary of availability of necessary functions: EVP_PKEY_get0_RSA Added in LibreSSL 2.7.0 EVP_PKEY_up_ref Added in LibreSSL 2.7.0 RSA_meth_new Added in LibreSSL 2.7.0 RSA_meth_free Added in LibreSSL 2.7.0 RSA_meth_get0_app_data ABSENT in LibreSSL 2.9.1 RSA_meth_set0_app_data ABSENT in LibreSSL 2.9.1 RSA_meth_set_priv_enc Added in LibreSSL 2.7.0 X509_up_ref Added in LibreSSL 2.5.1
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=4817be8b81641fdc439e4c847d16dad216357cbd commit 4817be8b81641fdc439e4c847d16dad216357cbd Author: Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org> AuthorDate: 2019-05-05 01:45:17 +0000 Commit: Mike Gilbert <floppym@gentoo.org> CommitDate: 2019-05-05 19:04:00 +0000 net-libs/neon: Fix building with >=dev-libs/libressl-2.7. Fixes: https://bugs.gentoo.org/658210 Signed-off-by: Arfrever Frehtes Taifersar Arahesis <Arfrever@Apache.Org> Signed-off-by: Mike Gilbert <floppym@gentoo.org> net-libs/neon/neon-0.30.2.ebuild | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-)
