libtool: compile: x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -DLOCALEDIR=\"/usr/share/locale\" -Wall -Wextra -Wno-missing-field-initializers -Wno-sign-compare -Wno-unused-parameter -Werror=pointer-to-int-cast -Wdeclaration-after-statement -Werror-implicit-function-declaration -Wformat-nonliteral -Wformat-security -Winit-self -Wmissing-declarations -Wmissing-include-dirs -Wnested-externs -Wpointer-arith -Wwrite-strings -I/usr/include/libxml2 -I/usr/include/p11-kit-1 -O2 -pipe -march=native -c openssl-esp.c -fPIC -DPIC -o .libs/libopenconnect_la-openssl-esp.o openssl-esp.c:39:25: error: static declaration of ‘HMAC_CTX_new’ follows non-static declaration 39 | static inline HMAC_CTX *HMAC_CTX_new(void) | ^~~~~~~~~~~~ In file included from /usr/include/openssl/ssl.h:150, ------------------------------------------------------------------- This is an unstable amd64 chroot image at a tinderbox (==build bot) name: 17.1_desktop_plasma_systemd-libressl-20190921-191550 ------------------------------------------------------------------- gcc-config -l: [1] x86_64-pc-linux-gnu-9.2.0 * clang: clang version 9.0.0 (tags/RELEASE_900/final) Target: x86_64-pc-linux-gnu Thread model: posix InstalledDir: /usr/lib/llvm/9/bin llvm: 9.0.0 Available Python interpreters, in order of preference: [1] python3.6 [2] python2.7 (fallback) [3] jython2.7 (fallback) Available Ruby profiles: [1] ruby24 (with Rubygems) [2] ruby25 (with Rubygems) * Available Rust versions: [1] rust-1.37.0 * java-config: The following VMs are available for generation-2: *) IcedTea JDK 3.13.0 [icedtea-bin-8] Available Java Virtual Machines: [1] icedtea-bin-8 system-vm repository: ==> /var/db/repos/gentoo/metadata/timestamp.chk <== Tue, 24 Sep 2019 22:06:12 +0000 emerge -qpvO net-vpn/openconnect [ebuild N ] net-vpn/openconnect-8.05 USE="libressl lz4 nls -doc -gnutls -gssapi -libproxy -smartcard -static-libs -stoken"
Created attachment 591040 [details] emerge-info.txt
Created attachment 591042 [details] emerge-history.txt
Created attachment 591044 [details] environment
Created attachment 591046 [details] etc.portage.tbz2
Created attachment 591048 [details] logs.tbz2
Created attachment 591050 [details] net-vpn:openconnect-8.05:20190924-221311.log
Created attachment 591052 [details] temp.tbz2
Someone using libressl will need to provide a patch.
Created attachment 591896 [details, diff] libressl patch Here you go. I've sent the first two patches upstream in August but haven't received any feedback so far: https://lists.infradead.org/pipermail/openconnect-devel/2019-August/005395.html https://lists.infradead.org/pipermail/openconnect-devel/2019-August/005394.html The third one is kinda ugly. Please read the commit message for more info.
(In reply to Philipp Ammann from comment #9) Please let me know when upstream has accepted all patches; I do not want to carry patches I cannot test.
FWIW I have tested those two patches and net-vpn/openconnect-8.05 now works for me with libressl.
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=92b665c22286041455f9f4a110dbe6b425d962af commit 92b665c22286041455f9f4a110dbe6b425d962af Author: Mike Gilbert <floppym@gentoo.org> AuthorDate: 2020-04-03 14:25:24 +0000 Commit: Mike Gilbert <floppym@gentoo.org> CommitDate: 2020-04-03 14:26:29 +0000 net-vpn/openconnect: drop libressl support Building with LibreSSL is currently broken. When it does work, it doesn't support DTLS anyway. GnuTLS is a more viable alternative. Bug: https://bugs.gentoo.org/695630 Closes: https://bugs.gentoo.org/715990 Package-Manager: Portage-2.3.96_p4, Repoman-2.3.22_p1 Signed-off-by: Mike Gilbert <floppym@gentoo.org> net-vpn/openconnect/openconnect-8.05.ebuild | 5 ++--- net-vpn/openconnect/openconnect-8.06.ebuild | 5 ++--- net-vpn/openconnect/openconnect-9999.ebuild | 5 ++--- 3 files changed, 6 insertions(+), 9 deletions(-)
