Re: pkg/53587: security/racoon2 doesn not build

[Hauke Fath <hf%spg.tu-darmstadt.de@localhost>]

The following reply was made to PR pkg/53587; it has been noted by GNATS.

From: Hauke Fath <hf%spg.tu-darmstadt.de@localhost>
To: gnats-bugs%netbsd.org@localhost
Cc: pkg-manager%netbsd.org@localhost, gnats-admin%netbsd.org@localhost,
        Christos Zoulas <christos%zoulas.com@localhost>
Subject: Re: pkg/53587: security/racoon2 doesn not build
Date: Tue, 11 Sep 2018 11:46:07 +0200

 On 09/10/18 14:35, Christos Zoulas wrote:
 > The following reply was made to PR pkg/53587; it has been noted by GNATS.
 > 
 > From: christos%zoulas.com@localhost (Christos Zoulas)
 > To: gnats-bugs%NetBSD.org@localhost, pkg-manager%netbsd.org@localhost, gnats-admin%netbsd.org@localhost,
 > 	pkgsrc-bugs%netbsd.org@localhost
 > Cc:
 > Subject: Re: pkg/53587: security/racoon2 doesn not build
 > Date: Mon, 10 Sep 2018 08:30:19 -0400
 > 
 >   On Sep 10, 10:50am, hf%spg.tu-darmstadt.de@localhost (Hauke Fath) wrote:
 >   -- Subject: pkg/53587: security/racoon2 doesn not build
 >   
 >   
 >   Try defining OPENSSL_API_COMPAT to 0x10100000 ...
 
 Hum. After finding that several source files needed the above, I went with
 
 Index: Makefile
 ===================================================================
 RCS file: /cvsroot/pkgsrc/security/racoon2/Makefile,v
 retrieving revision 1.14
 diff -u -u -r1.14 Makefile
 --- Makefile    22 Aug 2018 09:46:29 -0000      1.14
 +++ Makefile    11 Sep 2018 09:43:11 -0000
 @@ -23,6 +23,8 @@
   USE_TOOLS+=            grep sed flex yacc
   USE_TOOLS+=            gzip:run perl:run       # used by pskgen
 
 +CPPFLAGS+=             -DOPENSSL_API_COMPAT=0x10100000L
 +
   # @perl_bindir@ will be /usr/pkgsrc/security/racoon2/work/.tools/bin/perl.
   # REPLACE_PERL cannot be used, since @perl_bindir@ does not match its 
 pattern.
   REPLACE_INTERPRETER+=  perl
 
 
 which then led to
 
 [...]
 --- iked ---
 gcc -L../lib -L/usr/lib -Wl,-R/usr/lib -Wl,-R/usr/pkg/lib -L/usr/lib -o 
 iked main.o dh.o ike_sa.o ike_conf.o isakmp.o authenticator.o 
 encryptor.o crypto_openssl.o str2val.o keyed_hash.o sockmisc.o 
 ike_pfkey.o ike_spmif.o schedule.o ratelimit.o script.o ikev1/ikev1.o 
 ikev1/genlist.o ikev1/ipsec_doi.o ikev1/isakmp_ident.o 
 ikev1/isakmp_quick.o ikev1/isakmp_inf.o ikev1/handler.o ikev1/strnames.o 
 ikev1/oakley.o ikev1/vendorid.o ikev1/algorithm.o ikev1/proposal.o 
 ikev1/pfkey.o ikev1/ikev1_natt.o ikev2.o ikev2_auth.o ikev2_child.o 
 ikev2_cookie.o ikev2_notify.o ikev2_packet.o ikev2_payload.o 
 ikev2_proposal.o ikev2_rekey.o ikev2_config.o nattraversal.o   -lracoon 
 -lcrypto
 crypto_openssl.o: In function `cb_check_cert':
 /var/obj/pkgsrc/security/racoon2/work/racoon2-b2a193fc9875d1fb89c0a51690745379bc135fcf/iked/crypto_openssl.c:331: 
 undefined reference to `X509_STORE_CTX_get0_cert'
 crypto_openssl.o: In function `eay_dss_sign':
 /var/obj/pkgsrc/security/racoon2/work/racoon2-b2a193fc9875d1fb89c0a51690745379bc135fcf/iked/crypto_openssl.c:1241: 
 undefined reference to `EVP_PKEY_get0_DSA'
 *** [iked] Error code 1
 
 make[1]: stopped in 
 /var/obj/pkgsrc/security/racoon2/work/racoon2-b2a193fc9875d1fb89c0a51690745379bc135fcf/iked
 1 error
 [...]
 
 both of which are not anywhere under /usr/include on netbsd-8.
 
 Cheerio,
 hauke
 
 -- 
       The ASCII Ribbon Campaign                    Hauke Fath
 ()     No HTML/RTF in email	        Institut für Nachrichtentechnik
 /\     No Word docs in email                     TU Darmstadt
       Respect for open standards              Ruf +49-6151-16-21344