lib/60511: openssl set lists differences to pkgsrc

["wiz%NetBSD.org@localhost via gnats" <gnats-admin%NetBSD.org@localhost>]

>Number:         60511
>Category:       lib
>Synopsis:       openssl set lists differences to pkgsrc
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    lib-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Jul 27 15:45:00 +0000 2026
>Originator:     Thomas Klausner
>Release:        NetBSD 11.99.7
>Organization:
	
>Environment:
	
	
Architecture: x86_64
Machine: amd64
>Description:
libssh 0.12 wants to use include/openssl/ml_kem.h, but NetBSD does not provide this.

I compared the pkgsrc PLIST with the source set lists and found the following differences:

Only pkgsrc (openssl 3.6.3, but this didn't change since 3.5.3) installs:

include/openssl/byteorder.h
include/openssl/hpke.h
include/openssl/ml_kem.h

Only NetBSD (openssl 3.5.7) installs:

include/openssl/asn1_mac.h
include/openssl/cmp.h
include/openssl/cmp_util.h
include/openssl/cmperr.h
include/openssl/configuration.h
include/openssl/conftypes.h
include/openssl/core.h
include/openssl/core_dispatch.h
include/openssl/core_names.h
include/openssl/core_object.h
include/openssl/crmf.h
include/openssl/crmferr.h
include/openssl/cryptoerr_legacy.h
include/openssl/decoder.h
include/openssl/decodererr.h
include/openssl/encoder.h
include/openssl/encodererr.h
include/openssl/ess.h
include/openssl/esserr.h
include/openssl/fips_names.h
include/openssl/fipskey.h
include/openssl/http.h
include/openssl/httperr.h
include/openssl/macros.h
include/openssl/param_build.h
include/openssl/params.h
include/openssl/prov_ssl.h
include/openssl/proverr.h
include/openssl/provider.h
include/openssl/rand_drbg.h
include/openssl/self_test.h
include/openssl/sslerr_legacy.h
include/openssl/trace.h
include/openssl/types.h

There is one extra special case:
include/openssl/asn1_mac.h
was installed with 1.1 and 3.0, and is not installed with the current 3.5.7,
but it's not marked as obsolete in the set list.

>How-To-Repeat:
Try compiling libssh 0.12.1, compare set lists and PLIST.
>Fix:
I suggest:

- install the three missing files
- stop installing the many other files that pkgsrc doesn't install
- add asn1_mac.h as obsolete for openssl 3.5

I can do the change but wanted confirmation first that others agree.

>Unformatted: