Bug 695640 – net-libs/ldns-1.7.1 : configure: error: OpenSSL does not support offline DANE verification (Needed for the DANE-TA usage type). Please upgrade OpenSSL to version >= 1.1.0 or rerun with --disable-dane-verify or --disable-da

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Toralf Förster 2019-09-25 18:10:15 UTC]

checking for X509_check_ca... yes
checking for SSL_get0_dane... no
configure: error: OpenSSL does not support offline DANE verification (Needed for the DANE-TA usage type).  Please upgrade OpenSSL to version >= 1.1.0 or rerun with --disable-dane-verify or --disable-dane-ta-usage

!!! Please attach the following file when seeking support:
!!! /var/tmp/portage/net-libs/ldns-1.7.1/work/ldns-1.7.1-abi_x86_64.amd64/config.log

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.1_desktop_plasma_systemd-libressl-20190921-191550

  -------------------------------------------------------------------

gcc-config -l:
 [1] x86_64-pc-linux-gnu-9.2.0 *

clang:
clang version 9.0.0 (tags/RELEASE_900/final)
Target: x86_64-pc-linux-gnu
Thread model: posix
InstalledDir: /usr/lib/llvm/9/bin
llvm:
9.0.0
Available Python interpreters, in order of preference:
  [1]   python3.6
  [2]   python2.7 (fallback)
  [3]   jython2.7 (fallback)
Available Ruby profiles:
  [1]   ruby24 (with Rubygems)
  [2]   ruby25 (with Rubygems) *
Available Rust versions:
  [1]   rust-1.37.0 *
java-config:
The following VMs are available for generation-2:
*)	IcedTea JDK 3.13.0 [icedtea-bin-8]
Available Java Virtual Machines:
  [1]   icedtea-bin-8  system-vm

repository:
==> /var/db/repos/gentoo/metadata/timestamp.chk <==
Wed, 25 Sep 2019 17:26:12 +0000

emerge -qpvO net-libs/ldns
[ebuild     U ] net-libs/ldns-1.7.1 [1.7.0-r2] USE="dane ecdsa libressl -doc -ed25519% -ed448% -gost -python -static-libs -vim-syntax" ABI_X86="(64) -32 (-x32)" PYTHON_SINGLE_TARGET="-python2_7% -python3_5%" PYTHON_TARGETS="python2_7 -python3_5%"

[Comment 1 Toralf Förster 2019-09-25 18:10:17 UTC]

Created attachment 591062 [details]
emerge-info.txt

[Comment 2 Toralf Förster 2019-09-25 18:10:20 UTC]

Created attachment 591064 [details]
emerge-history.txt

[Comment 3 Toralf Förster 2019-09-25 18:10:23 UTC]

Created attachment 591066 [details]
environment

[Comment 4 Toralf Förster 2019-09-25 18:10:26 UTC]

Created attachment 591068 [details]
etc.portage.tbz2

[Comment 5 Toralf Förster 2019-09-25 18:10:29 UTC]

Created attachment 591070 [details]
logs.tbz2

[Comment 6 Toralf Förster 2019-09-25 18:10:32 UTC]

Created attachment 591072 [details]
net-libs:ldns-1.7.1:20190925-175805.log

[Comment 7 Toralf Förster 2019-09-25 18:10:35 UTC]

Created attachment 591074 [details]
temp.tbz2

[Comment 8 Marc Schiffbauer 2019-09-27 11:38:53 UTC]

Ok, thanks. So for now we will disable DANE-TA for USE=libressl as well

[Comment 9 Marc Schiffbauer 2019-09-29 13:52:45 UTC]

Fixed in 1.7.1-r1