Created attachment 206113 [details] build log FreeBSD 12.0-RELEASE-p2 FreeBSD 12.0-RELEASE-p2 c3ec797e4c1(releng/12.0) amd64 openssl is not installed on system, installed libressl. libtool: compile: cc -DHAVE_CONFIG_H -I. -I../../../.. -I../../../../src/libstrongswan -DFIPS_MODE=0 -I/usr/local/include -O2 -pipe -fstack-pro$ --- openssl_plugin.lo --- openssl_plugin.c:315:10: error: use of undeclared identifier 'EVP_PKEY_ED448' case EVP_PKEY_ED448: ^ openssl_plugin.c:466:8: error: use of undeclared identifier 'EVP_PKEY_ED25519'; did you mean 'KEY_ED25519'? case EVP_PKEY_ED25519: ^~~~~~~~~~~~~~~~ KEY_ED25519 ../../../../src/libstrongswan/credentials/keys/public_key.h:47:2: note: 'KEY_ED25519' declared here KEY_ED25519 = 4, ^ openssl_plugin.c:467:8: error: use of undeclared identifier 'EVP_PKEY_ED448' case EVP_PKEY_ED448: ^ 1 warning and 4 errors generated. *** [openssl_plugin.lo] Error code 1 make[7]: stopped in /usr/ports/security/strongswan/work/strongswan-5.8.0/src/libstrongswan/plugins/openssl --- openssl_crl.lo --- 1 warning generated. 1 error
Created attachment 206186 [details] Patch to exclude openssl functions not supported by LibreSSL Hi, Please check if this patch solves your issue. I added some patches for the openssl plugin to exclude some features not supported by LibreSSL
thank you. works very well.
(In reply to igor.polovykh from comment #2) hi Can you tell how did you actually apply this patch. I am facing the same error Strowgswan5.9.0 and freebsd 12.1 I tried the same patch but did not succeeded. Can you tell me please how did you actually apply this patch thanks,
(In reply to sohaib khan from comment #3) - Download the patch file and save it (e.g. libressl.patch) - Copy the patch file to the strongswan port directory (/usr/ports/security/strongswan) - Change to the strongswan port directory (cd /usr/ports/security/strongswan) - patch -p 0 < libressl.patch patch will apply the patch the the strongswan port in the directory and it can then be compiled. It creates a number of extra files in the files directory in the strongSwan port to patch the libressl fixes.
thanks alot. i will try it. thank you so much for helping me. so nice of you :-)