[Bug 225623] ftp/curl: SSL broken

Fri Feb 2 06:48:15 UTC 2018

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=225623

            Bug ID: 225623
           Summary: ftp/curl: SSL broken
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: sunpoet at FreeBSD.org
          Reporter: johan at stromnet.se
             Flags: maintainer-feedback?(sunpoet at FreeBSD.org)
          Assignee: sunpoet at FreeBSD.org

FreeBSD 10.3, curl 7.58.0, https no longer works:

# curl https://www.somesite.com
<html>
....

# pkg upgrade curl
Installed packages to be UPGRADED:
        curl: 7.57.0 -> 7.58.0 [mysite]
# curl https://www.somesite.com
curl: (1) Protocol "https" not supported or disabled in libcurl
# 

Package built in own poudriere. Build options (unchanged):

_OPTIONS_READ=curl-7.58.0
_FILE_COMPLETE_OPTIONS_LIST=BROTLI CA_BUNDLE COOKIES CURL_DEBUG DEBUG DOCS
EXAMPLES IDN IPV6 METALINK PROXY PSL TLS_SRP GSSAPI_BASE GSSAPI_HEIMDAL
GSSAPI_MIT GSSAPI_NONE CARES THREADED_RESOLVER GNUTLS NSS OPENSSL POLARSSL
WOLFSSL DICT FTP GOPHER HTTP HTTP2 IMAP LDAP LDAPS LIBSSH2 POP3 RTMP RTSP SMB
SMTP TELNET TFTP
OPTIONS_FILE_UNSET+=BROTLI
OPTIONS_FILE_SET+=CA_BUNDLE
OPTIONS_FILE_SET+=COOKIES
OPTIONS_FILE_UNSET+=CURL_DEBUG
OPTIONS_FILE_UNSET+=DEBUG
OPTIONS_FILE_SET+=DOCS
OPTIONS_FILE_SET+=EXAMPLES
OPTIONS_FILE_UNSET+=IDN
OPTIONS_FILE_SET+=IPV6
OPTIONS_FILE_UNSET+=METALINK
OPTIONS_FILE_SET+=PROXY
OPTIONS_FILE_UNSET+=PSL
OPTIONS_FILE_SET+=TLS_SRP
OPTIONS_FILE_UNSET+=GSSAPI_BASE
OPTIONS_FILE_UNSET+=GSSAPI_HEIMDAL
OPTIONS_FILE_UNSET+=GSSAPI_MIT
OPTIONS_FILE_SET+=GSSAPI_NONE
OPTIONS_FILE_UNSET+=CARES
OPTIONS_FILE_SET+=THREADED_RESOLVER
OPTIONS_FILE_UNSET+=GNUTLS
OPTIONS_FILE_UNSET+=NSS
OPTIONS_FILE_SET+=OPENSSL
OPTIONS_FILE_UNSET+=POLARSSL
OPTIONS_FILE_UNSET+=WOLFSSL
OPTIONS_FILE_UNSET+=DICT
OPTIONS_FILE_UNSET+=FTP
OPTIONS_FILE_UNSET+=GOPHER
OPTIONS_FILE_UNSET+=HTTP
OPTIONS_FILE_UNSET+=HTTP2
OPTIONS_FILE_SET+=IMAP
OPTIONS_FILE_UNSET+=LDAP
OPTIONS_FILE_UNSET+=LDAPS
OPTIONS_FILE_UNSET+=LIBSSH2
OPTIONS_FILE_SET+=POP3
OPTIONS_FILE_UNSET+=RTMP
OPTIONS_FILE_SET+=RTSP
OPTIONS_FILE_UNSET+=SMB
OPTIONS_FILE_SET+=SMTP
OPTIONS_FILE_UNSET+=TELNET
OPTIONS_FILE_UNSET+=TFTP

Binary seems to link with libssl atleast.

# ldd /usr/local/lib/libcurl.so
/usr/local/lib/libcurl.so:
        libssl.so.9 => /usr/local/lib/libssl.so.9 (0x80164e000)
        libcrypto.so.9 => /usr/local/lib/libcrypto.so.9 (0x8018c3000)
        libz.so.6 => /lib/libz.so.6 (0x801cd3000)
        libthr.so.3 => /lib/libthr.so.3 (0x801ee9000)
        libc.so.7 => /lib/libc.so.7 (0x800821000)
# ldd /usr/local/bin/curl
/usr/local/bin/curl:
        libcurl.so.4 => /usr/local/lib/libcurl.so.4 (0x80084e000)
        libz.so.6 => /lib/libz.so.6 (0x800a9c000)
        libthr.so.3 => /lib/libthr.so.3 (0x800cb2000)
        libc.so.7 => /lib/libc.so.7 (0x800ed7000)
        libssl.so.9 => /usr/local/lib/libssl.so.9 (0x801284000)
        libcrypto.so.9 => /usr/local/lib/libcrypto.so.9 (0x8014f9000)

openssl 1.0.2n,1 installed via ports too, if that might be part of problem?
I also tried to rebuild with GnuTLS instead, but that yielded no linked SSL
libraries at all:
# ldd /usr/local/bin/curl                                                 
/usr/local/bin/curl:                                                            
        libcurl.so.4 => /usr/local/lib/libcurl.so.4 (0x80084e000)               
        libz.so.6 => /lib/libz.so.6 (0x800a8b000)                               
        libthr.so.3 => /lib/libthr.so.3 (0x800ca1000)                           
        libc.so.7 => /lib/libc.so.7 (0x800ec6000)                               

# ldd /usr/local/lib/libcurl.so                                           
/usr/local/lib/libcurl.so:                                                      
        libz.so.6 => /lib/libz.so.6 (0x80163d000)                               
        libthr.so.3 => /lib/libthr.so.3 (0x801853000)                           
        libc.so.7 => /lib/libc.so.7 (0x800821000)

-- 
You are receiving this mail because:
You are the assignee for the bug.