latest libreswan fails to build with dnssec flag enabled. the error is: mk/config.mk:614: *** DEFAULT_DNSSEC_ROOTKEY_FILE unknown. Looked at upstream sources, makefiles tries to guess linux distribution and points sets DEFAULT_DNSSEC_ROOTKEY_FILE accordingly. It doesn't have a clause for gentoo systems, so it fails. https://github.com/libreswan/libreswan/blob/v4.11/mk/defaults/linux.mk I guess this needs to be patched to point to location provided by net-dns/dnssec-root, or maybe exporting variable from src_configure Reproducible: Always Steps to Reproduce: 1. echo "net-libs/libreswan dnssec" > /etc/portage/package.use/libreswan 2. emerge libreswan Actual Results: fails on build with: mk/config.mk:614: *** DEFAULT_DNSSEC_ROOTKEY_FILE unknown. Stop. Expected Results: libreswan builds and installs
Created attachment 864191 [details] build.log
Created attachment 864192 [details] emerge --info output
(In reply to Alex from comment #0) > latest libreswan fails to build with dnssec flag enabled. > > the error is: mk/config.mk:614: *** DEFAULT_DNSSEC_ROOTKEY_FILE unknown. > > Looked at upstream sources, makefiles tries to guess linux distribution and > points sets DEFAULT_DNSSEC_ROOTKEY_FILE accordingly. It doesn't have a > clause for gentoo systems, so it fails. > https://github.com/libreswan/libreswan/blob/v4.11/mk/defaults/linux.mk Thanks for the analysis. We can set the ROOTKEY file manually in the ebuild. That at least fixes the compilation issue. I have not been able to test if dnssec works as expected. Please report back if there are still runtime issues with it.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=c99a2499670a3e98c48e2560cd02e27dda31ffc7 commit c99a2499670a3e98c48e2560cd02e27dda31ffc7 Author: Hans de Graaff <graaff@gentoo.org> AuthorDate: 2023-06-20 05:24:49 +0000 Commit: Hans de Graaff <graaff@gentoo.org> CommitDate: 2023-06-20 05:25:50 +0000 net-vpn/libreswan: fix complication with USE=dnssec Thanks to Alex for the analysis and reporting the bug. Closes: https://bugs.gentoo.org/908822 Signed-off-by: Hans de Graaff <graaff@gentoo.org> net-vpn/libreswan/libreswan-4.11.ebuild | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)
