SSL_CTX_set_cipher_list ssl_openssl.c: In function ‘show_available_tls_ciphers_list’: ssl_openssl.c:1852:52: error: ‘TLS1_3_VERSION’ undeclared (first use in this function); did you mean ‘TLS1_2_VERSION’? SSL_CTX_set_min_proto_version(tls_ctx.ctx, TLS1_3_VERSION); ^~~~~~~~~~~~~~ TLS1_2_VERSION ------------------------------------------------------------------- This is an unstable amd64 chroot image at a tinderbox (==build bot) name: 17.1-hardened_libressl_20190218-201623 ------------------------------------------------------------------- Please see the tracker bug for details. gcc-config -l: [1] x86_64-pc-linux-gnu-7.3.1 [2] x86_64-pc-linux-gnu-8.2.0 * Available Python interpreters, in order of preference: [1] python3.7 [2] python3.6 [3] python2.7 (fallback) Available Ruby profiles: [1] ruby24 (with Rubygems) [2] ruby25 (with Rubygems) [3] ruby26 (with Rubygems) * Available Rust versions: [1] rust-1.32.0 * emerge -qpvO net-vpn/openvpn [ebuild N ] net-vpn/openvpn-2.4.7 USE="libressl lzo pam plugins ssl -down-root -examples -inotify -iproute2 -lz4 -mbedtls -pkcs11 (-selinux) -static -systemd -test"
Created attachment 566118 [details] emerge-info.txt
Created attachment 566120 [details] emerge-history.txt
Created attachment 566122 [details] environment
Created attachment 566124 [details] etc.portage.tbz2
Created attachment 566126 [details] logs.tbz2
Created attachment 566128 [details] net-vpn:openvpn-2.4.7:20190222-201619.log
Created attachment 566130 [details] temp.tbz2
https://github.com/libressl-portable/portable/issues/228 TLS 1.3 support is in development. It's not ready currently. It is disabled in current libressl source. We have to add a check for libressl at #if (OPENSSL_VERSION_NUMBER < 0x1010100fL) in src/openvpn/ssl_openssl.c
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=f52b8e80566cb783ec05e419c11a1b604b645399 commit f52b8e80566cb783ec05e419c11a1b604b645399 Author: Stefan Strogin <stefan.strogin@gmail.com> AuthorDate: 2019-02-23 18:23:12 +0000 Commit: Aaron Bauman <bman@gentoo.org> CommitDate: 2019-02-24 00:51:34 +0000 net-vpn/openvpn: add patch to fix build with LibreSSL Closes: https://bugs.gentoo.org/678604 Package-Manager: Portage-2.3.62, Repoman-2.3.12 Signed-off-by: Stefan Strogin <stefan.strogin@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/11145 Signed-off-by: Aaron Bauman <bman@gentoo.org> net-vpn/openvpn/files/openvpn-2.4.7-libressl.patch | 49 ++++++++++++++++++++++ ...penvpn-2.4.7.ebuild => openvpn-2.4.7-r1.ebuild} | 1 + 2 files changed, 50 insertions(+)
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c16af66cd6e5903520a80e73c6f594449e654a5f commit c16af66cd6e5903520a80e73c6f594449e654a5f Author: Stefan Strogin <stefan.strogin@gmail.com> AuthorDate: 2019-03-04 20:24:24 +0000 Commit: Patrick McLean <chutzpah@gentoo.org> CommitDate: 2019-03-13 00:43:18 +0000 net-vpn/openvpn: update LibreSSL patch to accepted upstream Bug: https://bugs.gentoo.org/678604 Package-Manager: Portage-2.3.62, Repoman-2.3.12 Signed-off-by: Stefan Strogin <stefan.strogin@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/11260 Signed-off-by: Patrick McLean <chutzpah@gentoo.org> net-vpn/openvpn/files/openvpn-2.4.7-libressl.patch | 133 +++++++++++++++++---- ...vpn-2.4.7-r1.ebuild => openvpn-2.4.7-r2.ebuild} | 0 2 files changed, 113 insertions(+), 20 deletions(-)
