[Bug 212149] security/strongswan incompatibility with libressl 2.4

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Aug 25 14:59:15 UTC 2016


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=212149

            Bug ID: 212149
           Summary: security/strongswan incompatibility with libressl 2.4
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs at FreeBSD.org
          Reporter: bsd at abinet.ru
                CC: strongswan at Nanoteq.com
             Flags: maintainer-feedback?(strongswan at Nanoteq.com)
                CC: strongswan at Nanoteq.com

Looks like we have a regression after libressl 2.4 update
I see following errors in console

Aug 25 17:14:59 sphinx charon: 00[LIB] plugin 'openssl' failed to load:
/usr/local/lib/ipsec/plugins/libstrongswan-openssl.so: Undefined symbol
"CMS_RecipientInfo_ktri_get0_signer_id"

Aug 25 17:14:59 sphinx charon: 05[IKE] configured DH group MODP_3072 not
supported

IKE_SA can't be established with these. 

The workaround is to rollback to 2.3.7 or link against base.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list