Bug 103084 - security/ipsec-tools does not compile
Summary: security/ipsec-tools does not compile
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: Tom McLaughlin
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-09-10 01:20 UTC by Thomas Schweikle
Modified: 2008-07-08 01:10 UTC (History)
0 users

See Also:

Attachments
smime.p7s (3.31 KB, application/x-pkcs7-signature)
2006-09-13 10:18 UTC, VANHULLEBUS Yvan 		no flags Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Thomas Schweikle 2006-09-10 01:20:20 UTC 
ports/ipsec-tools does not compile because of:
/usr/include/openssl/rc5.h:67:2: #error RC5 is disabled.

    66  #ifdef OPENSSL_NO_RC5
    67  #error RC5 is disabled.
    68  #endif

Well --- this is disabled somewhere in /usr/src/crypto, but it seems without any flag to enable it?!

Since some of the tools neccessary for building a VPN are in ports/ipsec-tools, but not in the base system I consider this a bad mistake or bug. Could one please tell me how to enable RC5 to fix various dependencies relying on RC5, even if this algorithm isn't as secure as expected?

My second point: why is oppenssl a part of the base system if ipsec-tools isn't?

Fix: 

RC5 must be enabled for openssl in the base system, or ports/ipsc-tools must be fixed to compile with RC5 disabled.
How-To-Repeat: Try to compile ipsec-tools.
Comment 1 Volker Stolz freebsd_committer freebsd_triage 2006-09-12 04:07:35 UTC 
Dear maintainer, please look at this issue. I couldn't reproduce it  
in 6.1R, though. - Volker
Comment 2 Volker Stolz freebsd_committer freebsd_triage 2006-09-12 04:08:50 UTC 
State Changed
From-To: open->feedback

- fix synopsis 
- forwarded to maintainer
Comment 3 VANHULLEBUS Yvan 2006-09-13 10:18:54 UTC 
On Tue, Sep 12, 2006 at 11:07:35AM +0800, Volker Stolz wrote:
> Dear maintainer, please look at this issue. I couldn't reproduce it  
> in 6.1R, though. - Volker


Hi.

As I understand it, it is really NOT directly related to ipsec-tools
port, but depends directly on the way openssl is
provided/managed/configured/installed.

As lots of other softwares in the ports collection, ipsec-tools just
uses the openssl provided in the system.

And rc5 support is DISABLED by default, and is only requested if the
corresponding specific option is enabled.

The solution is either to come back to default configuration for RC5
support, or provide RC5 support to ipsec-tools !!!


Yvan.

-- 
NETASQ
http://www.netasq.com
Comment 4 Shaun Amott freebsd_committer freebsd_triage 2006-10-07 18:50:47 UTC 
Responsible Changed
From-To: freebsd-ports-bugs->shaun

Grab.
Comment 5 Mark Linimon freebsd_committer freebsd_triage 2008-03-02 06:01:45 UTC 
State Changed
From-To: feedback->open

Feedback was received some time ago.
Comment 6 Shaun Amott freebsd_committer freebsd_triage 2008-04-18 14:13:42 UTC 
Responsible Changed
From-To: shaun->tmclaugh

tmclaugh wants this.
Comment 7 dfilter service freebsd_committer freebsd_triage 2008-07-08 00:59:42 UTC 
tmclaugh    2008-07-07 23:59:33 UTC

  FreeBSD ports repository

  Added files:
    security/ipsec-tools/files patch-crypto_openssl.c 
  Log:
  Fix build on 7.x when RC5 support is enabled.
  
  PR:             103084, 122187
  Submitted by:   Dmitry A Grigorovich
  Approved by:    maintainer
  
  Revision  Changes    Path
  1.1       +40 -0     ports/security/ipsec-tools/files/patch-crypto_openssl.c (new)
_______________________________________________
cvs-all@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/cvs-all
To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
Comment 8 Tom McLaughlin freebsd_committer freebsd_triage 2008-07-08 00:59:47 UTC 
State Changed
From-To: open->closed

Patch from PR 122187 commited.