mirror/freebsd-ports
1
0
Fork 0
mirror of https://git.FreeBSD.org/ports.git synced 2025-02-07 11:49:40 +00:00
Code Issues Releases Activity

OpenVPN won't compile with LibreSSL, mark IGNORE.

Browse Source 
Upstream maintainers are massively pushing back against patches
offered so far with valid and concrete technical reasons and unsuitability
of the LibreSSL version API that will create a maintenance nightmare.
(And LibreSSL abusing the OpenSSL API.)

PR:		238382
Submitted by:	pizzamig
This commit is contained in:
Matthias Andree 2019-07-13 08:31:14 +00:00
parent dd4250b2b5
commit aa5509fff0
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=506516
1 changed files with 2 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
security/openvpn/Makefile
View File

@ -41,7 +41,7 @@ OPTIONS_SINGLE= SSL
OPTIONS_SINGLE_SSL= OPENSSL MBEDTLS
PKCS11_DESC= Use security/pkcs11-helper
EASYRSA_DESC= Install security/easy-rsa RSA helper package
MBEDTLS_DESC= SSL/TLS via mbedTLS
MBEDTLS_DESC= SSL/TLS via mbedTLS (lacks TLS v1.3)
TUNNELBLICK_DESC= Tunnelblick XOR scramble patch (READ HELP!)
X509ALTUSERNAME_DESC= Enable --x509-username-field (OpenSSL only)
SMALL_DESC= Build a smaller executable with fewer features
@ -62,6 +62,7 @@ X509ALTUSERNAME_PREVENTS_MSG= OpenVPN ${DISTVERSION} cannot use --x509-username-
OPENSSL_USES= ssl
OPENSSL_CONFIGURE_ON= --with-crypto-library=openssl
IGNORE_SSL= libressl libressl-devel
LZ4_CONFIGURE_OFF= --disable-lz4
@ -115,17 +116,6 @@ _tlslibs=libmbedtls libmbedx509 libmbedcrypto
_tlslibs=libssl libcrypto
.endif
.if ${SSL_DEFAULT:Mlibressl*} && empty(PORT_OPTIONS:MMBEDTLS)
pre-everything::
@${ECHO_CMD} "WARNING: OpenVPN does not officially support LibreSSL."
@${ECHO_CMD} "If things break, rebuild with OpenSSL or mbedTLS."
@${ECHO_CMD} "You may wish to change your default SSL library"
@${ECHO_CMD} "and press Ctrl+C within the next 10 seconds to abort."
. if !(defined(PACKAGE_BUILDING) || defined(BATCH))
@sleep 10
. endif
.endif
# sanity check that we don't inherit incompatible SSL libs through,
# for instance, pkcs11-helper:
post-build: