Bug 258885

Summary: security/stunnel: still fails to build with libressl
Product: Ports & Packages Reporter: Felix Palmen <zirias>
Component: Individual Port(s)Assignee: Ryan Steinmetz <zi>
Status: Closed Works As Intended    
Severity: Affects Only Me Flags: bugzilla: maintainer-feedback? (zi)
Priority: ---    
Version: Latest   
Hardware: Any   
OS: Any   
Attachments:
Description Flags
0001-security-stunnel-fix-build-with-libressl
none
0001-security-stunnel-add-optional-patch-for-LibreSSL
none
0001-security-stunnel-add-optional-patch-for-LibreSSL none

Description Felix Palmen freebsd_committer freebsd_triage 2021-10-03 10:42:36 UTC
Created attachment 228392 [details]
0001-security-stunnel-fix-build-with-libressl

The port currently isn't marked broken with LibreSSL, but doesn't build either. It only contains a package restriction and an IGNORE when FIPS is selected.

As I've learned from previous PRs, this seems to be one of the cases where upstream is unwilling to support LibreSSL. But FreeBSD ports support it, so IMHO, there are two ways to fix this problem: Either mark the port broken with LibreSSL, or add a local patch…

Either way, I'm attaching a patch that works for me (no warranties…), so anyone who is fine with an unofficial patch can apply it themselves.
Comment 1 Felix Palmen freebsd_committer freebsd_triage 2021-10-03 11:03:31 UTC
Created attachment 228394 [details]
0001-security-stunnel-add-optional-patch-for-LibreSSL

As a possible alternative, it might also make sense to add LibreSSL support as an extra patch, so the user has to actively choose to use an unofficial patch? Idea outlined in attached patch…
Comment 2 Felix Palmen freebsd_committer freebsd_triage 2021-10-03 11:14:28 UTC
Created attachment 228395 [details]
0001-security-stunnel-add-optional-patch-for-LibreSSL

fixed stupid typo…
Comment 3 Ryan Steinmetz freebsd_committer freebsd_triage 2021-10-03 13:43:05 UTC
Please submit detection/support for libressl upstream to the stunnel devs.

As requested, I've marked the port broken with libressl in commit a2e23f5c2e.