Since OpenSSL was upgraded to 1.1.1 in head, this port compilation failed. Some extract of the build log: --- eaytest.o --- eaytest.c:106:41: error: incomplete definition of type 'struct evp_pkey_st' error = eay_check_rsasign(src, sig, evp->pkey.rsa); ~~~^ /usr/include/openssl/ossl_typ.h:93:16: note: forward declaration of 'struct evp_pkey_st' --- crypto_openssl.o --- crypto_openssl.c:319:10: error: incomplete definition of type 'struct X509_name_entry_st' if ((ea->value->length == 1 && ea->value->data[0] == '*') || ~~^ /usr/include/openssl/x509.h:73:16: note: forward declaration of 'struct X509_name_entry_st'
Created attachment 198726 [details] svn-diff-ipsec-tools I got it from there https://bugs.archlinux.org/task/59734 Builds with openssl111 on poudriere 11.2-amd64 fine. Don't tested functionality.
I did apply the above mentioned svn-diff-ipsec-tools patch, and ipsec-tools did compile again successfully (poudriere, openssl-1.1.1, stable-12). My ipsec/racoon tunnel is working as before. Thanks.
thanks for your test Michael, I will commit a fixed version (this patch but with conditional because once this patch is applied, this port didn't build on previous FreeBSD version).
A commit references this bug: Author: olivier Date: Sun Nov 25 20:35:23 UTC 2018 New revision: 485900 URL: https://svnweb.freebsd.org/changeset/ports/485900 Log: Fix openssl 1.1.1 breakage PR: 232169 Submitted by: Walter Schwarzenfeld <w.schwarzenfeld@utanet.at> Obtained from: https://bugs.archlinux.org/task/59734 Changes: head/security/ipsec-tools/Makefile head/security/ipsec-tools/files/extra-patch-aclocal.m4 head/security/ipsec-tools/files/extra-patch-ipsec-tools
Thanks all for your patch and tests.
Sorry to report, but your patch doesn't work for me: /usr/include/openssl/ossl_typ.h:120:16: note: forward declaration of 'struct x509_st' typedef struct x509_st X509; ^ fatal error: too many errors emitted, stopping now [-ferror-limit=] 20 errors generated. *** [crypto_openssl.o] Error code 1 make[6]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2/src/racoon --- sockmisc.o --- mv -f .deps/sockmisc.Tpo .deps/sockmisc.Po --- libracoon_la-vmbuf.lo --- mv -f .deps/libracoon_la-vmbuf.Tpo .deps/libracoon_la-vmbuf.Plo --- libracoon_la-kmpstat.lo --- mv -f .deps/libracoon_la-kmpstat.Tpo .deps/libracoon_la-kmpstat.Plo 1 error make[6]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2/src/racoon *** [all] Error code 2 make[5]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2/src/racoon 1 error make[5]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2/src/racoon *** [all-recursive] Error code 1 make[4]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2/src 1 error make[4]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2/src *** [all-recursive] Error code 1 make[3]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2 1 error make[3]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2 *** [all] Error code 2 make[2]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2 1 error make[2]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools/work/ipsec-tools-0.8.2 ===> Compilation failed unexpectedly. Try to set MAKE_JOBS_UNSAFE=yes and rebuild before reporting the failure to the maintainer. *** Error code 1 Stop. make[1]: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools *** Error code 1 Stop. make: stopped in /usr/home/poudriere/ports/default/security/ipsec-tools The sum of all files in /usr/ports/security/ipsec-tools are as follows: root> sum Makefile files/* 35953 5 Makefile 40954 2 files/extra-patch-aclocal.m4 51216 29 files/extra-patch-ipsec-tools 23962 6 files/natt.diff 33823 1 files/patch-handler.c 10199 5 files/patch-isakmp_frag.c 37122 1 files/patch-isakmp_inf.c 57042 1 files/patch-isakmp.c 10021 3 files/patch-isakmpinit 56352 6 files/patch-reqid.diff 3397 1 files/patch-src_racoon_gssapi.c 7773 1 files/patch-src-racoon-isakmp_cfg.c 37462 2 files/racoon.in 18508 1 files/wildcard-psk.diff
reopen see comment6
Cannot repeat some things. It builds on 11.2 with or without condition.
No, I tested wrong. Everythings ok. Build with condition and builds not without.
(In reply to Michael Grimm from comment #6) Hi Michael, I didn't reach to reproduce your problem: I've tested on -current 10.4 and 11.2. Can you check there is no 'old' files from the previous patches (I've renamed some files) in your port tree? Thanks
Hi Olivier, these are the files in security/ipsec-tools: -rw-r--r-- 1 root wheel uarch 144 Feb 6 2015 distinfo drwxr-xr-x 2 root wheel uarch 15 Nov 25 22:39 files -rw-r--r-- 1 root wheel uarch 4175 Nov 25 21:35 Makefile -rw-r--r-- 1 root wheel uarch 873 Jan 22 2014 pkg-descr -rw-r--r-- 1 root wheel uarch 826 Feb 6 2015 pkg-plist and these are the files in ../files: -rw-r--r-- 1 root wheel uarch 1049 Nov 25 21:35 files/extra-patch-aclocal.m4 -rw-r--r-- 1 root wheel uarch 29418 Nov 25 21:35 files/extra-patch-ipsec-tools -rw-r--r-- 1 root wheel uarch 5196 Apr 18 2017 files/natt.diff -rw-r--r-- 1 root wheel uarch 779 Apr 14 2018 files/patch-handler.c -rw-r--r-- 1 root wheel uarch 4106 Apr 14 2018 files/patch-isakmp_frag.c -rw-r--r-- 1 root wheel uarch 763 Apr 14 2018 files/patch-isakmp_inf.c -rw-r--r-- 1 root wheel uarch 958 Apr 14 2018 files/patch-isakmp.c -rw-r--r-- 1 root wheel uarch 2279 Apr 29 2018 files/patch-isakmpinit -rw-r--r-- 1 root wheel uarch 5888 Aug 10 12:03 files/patch-reqid.diff -rw-r--r-- 1 root wheel uarch 452 May 19 2015 files/patch-src_racoon_gssapi.c -rw-r--r-- 1 root wheel uarch 521 Feb 6 2015 files/patch-src-racoon-isakmp_cfg.c -rw-r--r-- 1 root wheel uarch 1031 Jan 24 2014 files/racoon.in -rw-r--r-- 1 root wheel uarch 431 Feb 6 2015 files/wildcard-psk.diff The checksums you will find in comment #6 This is the relevant entry in my poudriere make.conf on FreeBSD 12.0-PRERELEASE r340917: DEFAULT_VERSIONS+= bdb=5 ssl=openssl111 php=72 mysql=10.2m Please let me know what else I can check.
Add on: I do find the following in Makefile: . if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} == base I am not that familiar with this syntax, but doesn't that mean that this will not switch to openssl111 in my case because my SSL_DEFAULT equals to openssl111 instead of base? Regards, Michael
Yes, modifying my DEFAULT_VERSIONS from ... DEFAULT_VERSIONS+= bdb=5 ssl=openssl111 php=72 mysql=10.2m ... to ... DEFAULT_VERSIONS+= bdb=5 ssl=base php=72 mysql=10.2m ... did the trick. Now, ipsec-tools compile successfully
The attached patch to Makefile works for me: ------------------------------------------------------- --- Makefile 2018-11-26 08:37:05.378112000 +0100 +++ Makefile.old 2018-11-26 08:20:53.165248000 +0100 @@ -8,7 +8,7 @@ PORTNAME= ipsec-tools PORTVERSION= 0.8.2 -PORTREVISION= 7_3 +PORTREVISION= 7 CATEGORIES= security MASTER_SITES= SF @@ -84,10 +84,8 @@ .include <bsd.port.pre.mk> # Need to be patched for openssl-1.1.1 (default after 1200080) -# Possible values: base, openssl, openssl111, libressl, libressl-devel .if ${OPSYS} == FreeBSD -#. if ${OSVERSION} >= 1200085 && ( ${SSL_DEFAULT} == base || ${SSL_DEFAULT} == openssl111 ) -. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} != openssl +. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} == base BUILD_DEPENDS= automake>=0:devel/automake . endif .endif @@ -97,8 +95,7 @@ # Need to be patched for openssl-1.1.1 (default after 1200080) .if ${OPSYS} == FreeBSD -#. if ${OSVERSION} >= 1200085 && ( ${SSL_DEFAULT} == base || ${SSL_DEFAULT} == openssl111 ) -. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} != openssl +. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} == base post-configure: @${REINPLACE_CMD} -e "s/automake-1.14/automake-1.16/g" ${WRKSRC}/Makefile ${WRKSRC}/*/Makefile \ ${WRKSRC}/*/*/Makefile @@ -124,8 +121,7 @@ ${INSTALL_DATA} ${WRKSRC}/src/racoon/doc/* ${STAGEDIR}/${DOCSDIR} .if ${OPSYS} == FreeBSD -#. if ${OSVERSION} >= 1200085 && ( ${SSL_DEFAULT} == base || ${SSL_DEFAULT} == openssl111 ) -. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} != openssl +. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} == base EXTRA_PATCHES+= ${FILESDIR}/extra-patch-aclocal.m4 EXTRA_PATCHES+= ${FILESDIR}/extra-patch-ipsec-tools PLIST_FILES+= include/racoon/openssl_compat.h ---------------------------------------------------- Both possible fixes (either != openssl or == base || == openssl111) do work at my site but I cannot test it on OS < 12 Regrads, Michael
I wonder if all Makefile occurencies of "${SSL_DEFAULT} == base" have been modified to either ... "${SSL_DEFAULT} != openssl" or ${SSL_DEFAULT} == openssl111" ... in the meantime? Regards, Michael
Please, you need to modify your patch in the following regards: #) I do have STABLE-12 running #) I do *not* use OPENSSL from base #) I *do* use OPENSSL from ports (OpenSSL 1.1.1a) Your recent modification do constantly break compilation of ipsec-tools! I do always need to apply the following patch: mike> sudo cat /root/ipsec-tools.patch --------------------- --- Makefile.orig 2018-11-26 18:59:50.000000000 +0100 +++ Makefile 2019-02-02 09:31:57.897089000 +0100 @@ -85,7 +85,7 @@ # Need to be patched for openssl-1.1.1 (default after 1200080) .if ${OPSYS} == FreeBSD -. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} == base +. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} != openssl BUILD_DEPENDS+= automake>=0:devel/automake . endif .endif @@ -95,7 +95,7 @@ # Need to be patched for openssl-1.1.1 (default after 1200080) .if ${OPSYS} == FreeBSD -. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} == base +. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} != openssl post-configure: @${REINPLACE_CMD} -e "s/automake-1.14/automake-1.16/g" ${WRKSRC}/Makefile ${WRKSRC}/*/Makefile \ ${WRKSRC}/*/*/Makefile @@ -121,7 +121,7 @@ ${INSTALL_DATA} ${WRKSRC}/src/racoon/doc/* ${STAGEDIR}/${DOCSDIR} .if ${OPSYS} == FreeBSD -. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} == base +. if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} != openssl EXTRA_PATCHES+= ${FILESDIR}/extra-patch-aclocal.m4 EXTRA_PATCHES+= ${FILESDIR}/extra-patch-ipsec-tools PLIST_FILES+= include/racoon/openssl_compat.h --------------------- Onene could also use: if ${OSVERSION} >= 1200085 && ( ${SSL_DEFAULT} == base || ${SSL_DEFAULT} == openssl111 ) I did report this a couple of times since last November. Thank you in advance and with kind regards, Michael
Created attachment 201690 [details] ipsec-tools patch
A commit references this bug: Author: olivier Date: Sun Feb 3 21:04:25 UTC 2019 New revision: 492078 URL: https://svnweb.freebsd.org/changeset/ports/492078 Log: Fix build on 12-stable when using OpenSSL from port. PR: 232169 Submitted by: Michael Grimm <trashcan@ellael.org> Changes: head/security/ipsec-tools/Makefile
(In reply to Michael Grimm from comment #17) Hi, thanks for your patch, can you confirm that revision 485900 fixed it ? I've tested against 11.2 and 12.0 but not on a 12-stable.
(In reply to Olivier Cochard from comment #19) I can confirm that it is working on STABLE-12. Thanks for fixing this issue. Regards, Michael
Created attachment 210400 [details] Patch to deal with openssl defaults to 1.1.1, now
Sorry, my comment has been lost from attachment. The recent renaming of openssl111 port to openssl breaks my last years's patch, because, now, a probe on ${SSL_DEFAULT} is no longer needed, at least on STABLE-12.1. Just in case, older OS versions still need a test on ${SSL_DEFAULT} then patch in my seconf attachment will work for me as well.
Created attachment 210401 [details] Patch if a check on ${SSL_DEFAULT} may be needed
well, the newest patch from 2020 testbuilds fine. Not sure how to proceed...
(In reply to Kurt Jaeger from comment #24) I might have screwed my bug report completely :-) Sorry,´. But which of my two possible solutions did you test? That with ${SSL_DEFAULT} from 21:12 or that without any ${SSL_DEFAULT} check from 21:06?
(In reply to Michael Grimm from comment #25) The second patch only.
Hi, this still fails on FreeBSD 12.1 with openssl from ports and poudriere. Do you see any way to fix this? regards Ole eaytest.c:106:41: error: incomplete definition of type 'struct evp_pkey_st' error = eay_check_rsasign(src, sig, evp->pkey.rsa); ~~~^ /usr/include/openssl/ossl_typ.h:93:16: note: forward declaration of 'struct evp_pkey_st' typedef struct evp_pkey_st EVP_PKEY; ^
Make ipsec-tools fail on FreeBSD 12.2 with openssl-1.1.1j_1,1 from ports and add on make.conf: DEFAULT_VERSIONS+= ssl=openssl ================================================ eaytest.c:106:41: error: incomplete definition of type 'struct evp_pkey_st' error = eay_check_rsasign(src, sig, evp->pkey.rsa); ~~~^ /usr/include/openssl/ossl_typ.h:93:16: note: forward declaration of 'struct evp_pkey_st' typedef struct evp_pkey_st EVP_PKEY; ^ eaytest.c:316:6: warning: comparison of array 'dnstr_w1' not equal to a null pointer is always true [-Wtautological-pointer-compare] if (dnstr_w1 != NULL) { ^~~~~~~~ ~~~~ eaytest.c:326:6: warning: comparison of array 'dnstr_w1' not equal to a null pointer is always true [-Wtautological-pointer-compare] if (dnstr_w1 != NULL) { ^~~~~~~~ ~~~~ 2 warnings and 1 error generated. *** Error code 1 Stop. make[6]: stopped in /usr/ports/security/ipsec-tools/work/ipsec-tools-0.8.2/src/racoon *** Error code 1 ================================================ But deinstall openssl from ports, and add to make.conf: DEFAULT_VERSIONS+= ssl=base and ipsec-tools make without error. FreeBSD clean install. # uname -a FreeBSD test 12.2-RELEASE-p3 FreeBSD 12.2-RELEASE-p3 r369327 GENERIC amd64
This change solves the problem: ================================================ # diff /usr/ports/security/ipsec-tools/Makefile /usr/ports/security/ipsec-tools/Makefile.bad 104c104 < . if ${OSVERSION} >= 1200085 || ${SSL_DEFAULT} == openssl --- > . if ${OSVERSION} >= 1200085 && ${SSL_DEFAULT} != openssl ================================================ For some reason, the old version is back in release... Please fix it forever.
Created attachment 222988 [details] Patch check ${SSL_DEFAULT} Patch check ${SSL_DEFAULT}
I'm having trouble building ipsec tools. When I try to update ipsec-tools with portmaster I get the following error messages: --- crypto_openssl.o --- crypto_openssl.c:319:10: error: incomplete definition of type 'struct X509_name_entry_st' if ((ea->value->length == 1 && ea->value->data[0] == '*') || ~~^ /usr/include/openssl/x509.h:73:16: note: forward declaration of 'struct X509_name_entry_st' typedef struct X509_name_entry_st X509_NAME_ENTRY; ^ crypto_openssl.c:319:36: error: incomplete definition of type 'struct X509_name_entry_st' if ((ea->value->length == 1 && ea->value->data[0] == '*') || ~~^ /usr/include/openssl/x509.h:73:16: note: forward declaration of 'struct X509_name_entry_st' typedef struct X509_name_entry_st X509_NAME_ENTRY; ^ crypto_openssl.c:320:10: error: incomplete definition of type 'struct X509_name_entry_st' (eb->value->length == 1 && eb->value->data[0] == '*')) { ~~^ /usr/include/openssl/x509.h:73:16: note: forward declaration of 'struct X509_name_entry_st' typedef struct X509_name_entry_st X509_NAME_ENTRY; ^ crypto_openssl.c:320:36: error: incomplete definition of type 'struct X509_name_entry_st' (eb->value->length == 1 && eb->value->data[0] == '*')) { ~~^ /usr/include/openssl/x509.h:73:16: note: forward declaration of 'struct X509_name_entry_st' typedef struct X509_name_entry_st X509_NAME_ENTRY; ^ crypto_openssl.c:321:22: error: incomplete definition of type 'struct X509_name_entry_st' if (OBJ_cmp(ea->object,eb->object)) { ~~^ /usr/include/openssl/x509.h:73:16: note: forward declaration of 'struct X509_name_entry_st' typedef struct X509_name_entry_st X509_NAME_ENTRY; ^ crypto_openssl.c:321:33: error: incomplete definition of type 'struct X509_name_entry_st' if (OBJ_cmp(ea->object,eb->object)) { ~~^ /usr/include/openssl/x509.h:73:16: note: forward declaration of 'struct X509_name_entry_st' typedef struct X509_name_entry_st X509_NAME_ENTRY; ^ crypto_openssl.c:433:30: error: incomplete definition of type 'struct x509_store_ctx_st' X509_get_subject_name(ctx->current_cert), ~~~^ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:441:14: error: incomplete definition of type 'struct x509_store_ctx_st' switch (ctx->error) { ~~~^ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:456:37: error: incomplete definition of type 'struct x509_store_ctx_st' X509_verify_cert_error_string(ctx->error), ~~~^ ./plog.h:70:17: note: expanded from macro 'plog' _plog((pri), __VA_ARGS__); \ ^~~~~~~~~~~ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:457:7: error: incomplete definition of type 'struct x509_store_ctx_st' ctx->error, ~~~^ ./plog.h:70:17: note: expanded from macro 'plog' _plog((pri), __VA_ARGS__); \ ^~~~~~~~~~~ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:458:7: error: incomplete definition of type 'struct x509_store_ctx_st' ctx->error_depth, ~~~^ ./plog.h:70:17: note: expanded from macro 'plog' _plog((pri), __VA_ARGS__); \ ^~~~~~~~~~~ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:480:30: error: incomplete definition of type 'struct x509_store_ctx_st' X509_get_subject_name(ctx->current_cert), ~~~^ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:483:14: error: incomplete definition of type 'struct x509_store_ctx_st' switch (ctx->error) { ~~~^ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:493:37: error: incomplete definition of type 'struct x509_store_ctx_st' X509_verify_cert_error_string(ctx->error), ~~~^ ./plog.h:70:17: note: expanded from macro 'plog' _plog((pri), __VA_ARGS__); \ ^~~~~~~~~~~ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:494:7: error: incomplete definition of type 'struct x509_store_ctx_st' ctx->error, ~~~^ ./plog.h:70:17: note: expanded from macro 'plog' _plog((pri), __VA_ARGS__); \ ^~~~~~~~~~~ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:495:7: error: incomplete definition of type 'struct x509_store_ctx_st' ctx->error_depth, ~~~^ ./plog.h:70:17: note: expanded from macro 'plog' _plog((pri), __VA_ARGS__); \ ^~~~~~~~~~~ /usr/include/openssl/ossl_typ.h:129:16: note: forward declaration of 'struct x509_store_ctx_st' typedef struct x509_store_ctx_st X509_STORE_CTX; ^ crypto_openssl.c:520:26: error: incomplete definition of type 'struct x509_st' len = i2d_X509_NAME(x509->cert_info->subject, NULL); ~~~~^ /usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st' typedef struct x509_st X509; ^ crypto_openssl.c:526:26: error: incomplete definition of type 'struct x509_st' len = i2d_X509_NAME(x509->cert_info->subject, &bp); ~~~~^ /usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st' typedef struct x509_st X509; ^ crypto_openssl.c:665:26: error: incomplete definition of type 'struct x509_st' len = i2d_X509_NAME(x509->cert_info->issuer, NULL); ~~~~^ /usr/include/openssl/ossl_typ.h:121:16: note: forward declaration of 'struct x509_st' typedef struct x509_st X509; ^ fatal error: too many errors emitted, stopping now [-ferror-limit=] 20 errors generated. *** [crypto_openssl.o] Error code 1 make[6]: stopped in /usr/ports/security/ipsec-tools/work/ipsec-tools-0.8.2/src/racoon --- sockmisc.o --- mv -f .deps/sockmisc.Tpo .deps/sockmisc.Po --- libracoon_la-vmbuf.lo --- mv -f .deps/libracoon_la-vmbuf.Tpo .deps/libracoon_la-vmbuf.Plo --- libracoon_la-kmpstat.lo --- mv -f .deps/libracoon_la-kmpstat.Tpo .deps/libracoon_la-kmpstat.Plo 1 error make[6]: stopped in /usr/ports/security/ipsec-tools/work/ipsec-tools-0.8.2/src/racoon ===> Compilation failed unexpectedly. Try to set MAKE_JOBS_UNSAFE=yes and rebuild before reporting the failure to the maintainer. *** Error code 1 Stop. make[1]: stopped in /usr/ports/security/ipsec-tools *** Error code 1 Stop. make: stopped in /usr/ports/security/ipsec-tools ===>>> make build failed for security/ipsec-tools ===>>> Aborting update
(In reply to cin_nev from comment #31) % pkg info | grep openssl openssl-1.1.1n,1 TLSv1.3 capable SSL and crypto library % freebsd-version 12.3-RELEASE-p5
(In reply to cin_nev from comment #32) (In reply to cin_nev from comment #31) I solved this problem. I thought the patches discussed here were already included in the ports tree. But I was wrong. Fixing Makefile helped in resolving the issue. I'm sorry to disturb.