Re: security/openvpn does not compile in 14-CURRENT w/ poudriere

In reply to: Matthias Apitz : "security/openvpn does not compile in 14-CURRENT w/ poudriere"
Go to: [ bottom of page ] [ top of archives ] [ this month ]

From: Matthias Apitz <guru_at_unixarea.de>
Date: Tue, 15 Aug 2023 09:35:09 UTC

El día martes, agosto 15, 2023 a las 08:16:38a. m. +0200, Matthias Apitz escribió:

> 
> security/openvpn fails to build with an error message in the log:
> 
> ...
> libc.so.7
> libcrypto.so.11
> libcrypto.so.30
> libdl.so.1
> liblz4.so.1
> liblzo2.so.2
> libnv.so.1
> libpkcs11-helper.so.1
> libssl.so.11
> libthr.so.3
> /usr/ports/security/openvpn FAILED: either of libssl libcrypto libraries linked multiple times
> *** Error code 1
> 
> The full log is at http://www.unixarea.de/openvpn-2.6.5.log
> 
> The job uses via make.conf the SSL from the base:
> 
> ---Begin OPTIONS List---
> ===> The following configuration options are available for openvpn-2.6.5:
>      ASYNC_PUSH=off: Enable async-push support
>      DCO=on: Build with Data Channel Offload (ovpn(4)) support
>      DOCS=on: Build and/or install documentation
>      EASYRSA=on: Install security/easy-rsa RSA helper package
>      EXAMPLES=on: Build and/or install examples
>      LZ4=on: LZ4 compression support
>      LZO=on: LZO compression (incompatible with LibreSSL)
>      PKCS11=on: Use security/pkcs11-helper, needs same SSL lib!
>      SMALL=off: Build a smaller executable with fewer features
>      TEST=on: Build and/or run tests
>      UNITTESTS=off: Enable unit tests
>      X509ALTUSERNAME=off: Enable --x509-username-field
> ===> Use 'make config' to modify these settings
> ---End OPTIONS List---
> 
> --MAKE_ENV--
> OPENSSLBASE=/usr OPENSSLDIR=/etc/ssl OPENSSLINC=/usr/include OPENSSLLIB=/usr/lib ...
> 
> There is a similar, but closed PR: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=254323
> 

I've unset PKCS11 in the port's option:

# cat /usr/local/etc/poudriere.d/140-CURRENT-options/security_openvpn/options
# This file is auto-generated by 'make config'.
# Options for openvpn-2.6.5
_OPTIONS_READ=openvpn-2.6.5
_FILE_COMPLETE_OPTIONS_LIST=ASYNC_PUSH DCO DOCS EASYRSA EXAMPLES LZ4 LZO PKCS11 SMALL TEST UNITTESTS X509ALTUSERNAME
OPTIONS_FILE_UNSET+=ASYNC_PUSH
OPTIONS_FILE_SET+=DCO
OPTIONS_FILE_SET+=DOCS
OPTIONS_FILE_SET+=EASYRSA
OPTIONS_FILE_SET+=EXAMPLES
OPTIONS_FILE_SET+=LZ4
OPTIONS_FILE_SET+=LZO
OPTIONS_FILE_UNSET+=PKCS11
^^^^^^^^^^^^^^^^^^^^^^^^^^
OPTIONS_FILE_UNSET+=SMALL
OPTIONS_FILE_SET+=TEST
OPTIONS_FILE_UNSET+=UNITTESTS
OPTIONS_FILE_UNSET+=X509ALTUSERNAME

With this it builds fine.

	matthias

-- 
Matthias Apitz, ✉ guru@unixarea.de, http://www.unixarea.de/ +49-176-38902045
Public GnuPG key: http://www.unixarea.de/key.pub