[pkgsrc/trunk]: pkgsrc/net/wget wget: Fix https:// handling with OpenSSL 1.1.1

[leot <leot%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/9e45b5798f84
branches:  trunk
changeset: 334395:9e45b5798f84
user:      leot <leot%pkgsrc.org@localhost>
date:      Sun May 26 18:10:48 2019 +0000

description:
wget: Fix https:// handling with OpenSSL 1.1.1

Backport upstream commit 14e3712b8c39165219fa227bd11f6feae7b09a33
to fix https:// handling when openssl.cnf file is not found.

PKGREVISION++

diffstat:

 net/wget/Makefile                    |   3 +-
 net/wget/distinfo                    |   3 +-
 net/wget/patches/patch-src_openssl.c |  47 ++++++++++++++++++++++++++++++++++++
 3 files changed, 51 insertions(+), 2 deletions(-)

diffs (76 lines):

diff -r ef08784b278b -r 9e45b5798f84 net/wget/Makefile
--- a/net/wget/Makefile Sun May 26 17:11:36 2019 +0000
+++ b/net/wget/Makefile Sun May 26 18:10:48 2019 +0000
@@ -1,6 +1,7 @@
-# $NetBSD: Makefile,v 1.146 2019/04/07 09:02:00 gutteridge Exp $
+# $NetBSD: Makefile,v 1.147 2019/05/26 18:10:48 leot Exp $
 
 DISTNAME=      wget-1.20.3
+PKGREVISION=   1
 CATEGORIES=    net
 MASTER_SITES=  ${MASTER_SITE_GNU:=wget/}
 EXTRACT_SUFX=  .tar.lz
diff -r ef08784b278b -r 9e45b5798f84 net/wget/distinfo
--- a/net/wget/distinfo Sun May 26 17:11:36 2019 +0000
+++ b/net/wget/distinfo Sun May 26 18:10:48 2019 +0000
@@ -1,7 +1,8 @@
-$NetBSD: distinfo,v 1.59 2019/04/07 09:02:00 gutteridge Exp $
+$NetBSD: distinfo,v 1.60 2019/05/26 18:10:48 leot Exp $
 
 SHA1 (wget-1.20.3.tar.lz) = 021929778956b7d71cf5c4fd98b4c719b293088d
 RMD160 (wget-1.20.3.tar.lz) = 799ac821c7ffde9d2cb3007a6ce4114a66181ce6
 SHA512 (wget-1.20.3.tar.lz) = 95fb064f0d79b0a3178a83322f58a85a3a036fb300ed759eb67a538f0bbacdd552f6cbeb60d63b4f0113e8467d923a5ce7ac5570b7a4ce1733b3dfd559bb33b2
 Size (wget-1.20.3.tar.lz) = 2135272 bytes
 SHA1 (patch-doc_wget.texi) = 6db25b3500ff4617b5ade34d9013b1f9876104f8
+SHA1 (patch-src_openssl.c) = 70abf425c36c48b07fa67f48562fe77c002cc620
diff -r ef08784b278b -r 9e45b5798f84 net/wget/patches/patch-src_openssl.c
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/net/wget/patches/patch-src_openssl.c      Sun May 26 18:10:48 2019 +0000
@@ -0,0 +1,47 @@
+$NetBSD: patch-src_openssl.c,v 1.1 2019/05/26 18:10:49 leot Exp $
+
+Backport upstream commit 14e3712b8c39165219fa227bd11f6feae7b09a33:
+
+src/openssl.c: fix ssl_init for openssl 1.1.1
+
+ssl_init fails with openssl 1.1.1 when openssl.cnf is not found.
+Redundant calls to intialization functions were removed as
+OPENSSL_config takes care of them for openssl versions < 1.1.0.
+For versions > 1.1.0, OPENSSL_init_ssl is preferred.
+
+--- src/openssl.c.orig 2019-04-05 09:58:33.000000000 +0000
++++ src/openssl.c
+@@ -174,7 +174,9 @@ ssl_init (void)
+ #if OPENSSL_VERSION_NUMBER >= 0x00907000
+   if (ssl_true_initialized == 0)
+     {
+-#if OPENSSL_API_COMPAT < 0x10100000L
++#if !defined(LIBRESSL_VERSION_NUMBER) && (OPENSSL_VERSION_NUMBER >= 0x10100000L)
++      OPENSSL_init_ssl (OPENSSL_INIT_LOAD_CONFIG | OPENSSL_INIT_ENGINE_ALL_BUILTIN, NULL);
++#else
+       OPENSSL_config (NULL);
+ #endif
+       ssl_true_initialized = 1;
+@@ -194,21 +196,9 @@ ssl_init (void)
+       goto error;
+     }
+ 
+-#if OPENSSL_VERSION_NUMBER >= 0x00907000
+-  OPENSSL_load_builtin_modules();
+-#ifndef OPENSSL_NO_ENGINE
+-  ENGINE_load_builtin_engines();
+-#endif
+-  CONF_modules_load_file(NULL, NULL,
+-      CONF_MFLAGS_DEFAULT_SECTION|CONF_MFLAGS_IGNORE_MISSING_FILE);
+-#endif
+-#if OPENSSL_API_COMPAT >= 0x10100000L
+-  OPENSSL_init_ssl(0, NULL);
+-#else
++#if defined(LIBRESSL_VERSION_NUMBER) || (OPENSSL_VERSION_NUMBER < 0x10100000L)
+   SSL_library_init ();
+   SSL_load_error_strings ();
+-#endif
+-#if OPENSSL_VERSION_NUMBER < 0x10100000L
+   SSLeay_add_all_algorithms ();
+   SSLeay_add_ssl_algorithms ();
+ #endif