Bug 711266

Summary:	net-misc/openssh-8.1_p1-r2: build fails with USE="hpn libressl"
Product:	Gentoo Linux	Reporter:	kfm <kfm>
Component:	Current packages	Assignee:	Gentoo's Team for Core System packages <base-system>
Status:	RESOLVED WONTFIX
Severity:	normal	CC:	alexanderyt, filakhtov, piotr.staroszczyk, spiderx
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	561854

Description kfm 2020-03-02 00:34:13 UTC

Per the summary, openssh fails to build against libressl if the hpn USE flag is enabled, citing undefined references to the following symbols:

   EVP_CIPHER_meth_new
   EVP_CIPHER_meth_set_cleanup
   EVP_CIPHER_meth_set_do_cipher
   EVP_CIPHER_meth_set_flags
   EVP_CIPHER_meth_set_init
   EVP_CIPHER_meth_set_iv_length

This is as tested against libressl-3.0.2.

As 8.1_p1-r2 is currently undergoing stable keywording, I would suggest that both USE flags are made to block one another until a better solution can be found.

Comment 1 Alexandr Tiurin 2020-03-05 16:15:04 UTC

Same issue with 
USE="hpn pam pie -X -X509 -audit -bindist -debug -kerberos -ldns -libedit -libressl -livecd -sctp (-selinux) -ssl -static -test -xmss"

In file included from ssh_api.h:26,
                 from ssh_api.c:25:
cipher.h:53:33: error: unknown type name ‘EVP_CIPHER_CTX’
   53 | void ssh_aes_ctr_thread_destroy(EVP_CIPHER_CTX *ctx); // defined in cipher-ctr-mt.c
      |                                 ^~~~~~~~~~~~~~
cipher.h:54:40: error: unknown type name ‘EVP_CIPHER_CTX’
   54 | void ssh_aes_ctr_thread_reconstruction(EVP_CIPHER_CTX *ctx);
      |                                        ^~~~~~~~~~~~~~
In file included from sshkey.c:55:
cipher.h:53:33: error: unknown type name ‘EVP_CIPHER_CTX’
   53 | void ssh_aes_ctr_thread_destroy(EVP_CIPHER_CTX *ctx); // defined in cipher-ctr-mt.c
      |                                 ^~~~~~~~~~~~~~
cipher.h:54:40: error: unknown type name ‘EVP_CIPHER_CTX’
   54 | void ssh_aes_ctr_thread_reconstruction(EVP_CIPHER_CTX *ctx);
      |                                        ^~~~~~~~~~~~~~