misc/59594: SSL checkflist build errors

[rwhitlock22%gmail.com@localhost]

>Number:         59594
>Category:       misc
>Synopsis:       SSL checkflist build errors
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    misc-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Aug 13 17:10:00 +0000 2025
>Originator:     Robert Whitlock
>Release:        NetBSD current, Aug 13, 2025
>Organization:
>Environment:
11.99.1 kernel on 10.99.something userland, amd64
>Description:
Building the NetBSD userland fails with checkflist errors, likely due to some OpenSSL update.


checkflist ===> distrib/sets
#   execute  checkflist
cd /usr/netbsd/current/src/distrib/sets &&  DESTDIR=/usr/netbsd/current/build/THINKPAD/destdir.amd64  MACHINE=amd64  MACHINE_ARCH=x86_64  AWK=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbawk  CKSUM=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbcksum  DB=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbdb  EGREP=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbgrep\ -E  HOST_SH=/bin/sh  MAKE=make  MKTEMP=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbmktemp  MTREE=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbmtree  PAX=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbpax  COMPRESS_PROGRAM=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbxz  GZIP=-n  XZ_OPT=-9  TAR_SUFF=tar.xz  PKG_CREATE=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbpkg_create  SED=/usr/netbsd/current/build/THINKPAD/
 tooldir.NetBSD-11.99.1-amd64/bin/nbsed  TSORT=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbtsort\ -q  /bin/sh /usr/netbsd/current/src/distrib/sets/checkflist  -L base,x  

=======  225 extra files in DESTDIR  =========
Files in DESTDIR but missing from flist.
File is obsolete or flist is out of date ?
------------------------------------------
./lib/libcrypto.so.16
./lib/libcrypto.so.16.0
./usr/include/openssl/e_ostime.h
./usr/include/openssl/indicator.h
./usr/include/openssl/quic.h
./usr/include/openssl/x509_acert.h
./usr/lib/i386/libcrypto.so.16
./usr/lib/i386/libcrypto.so.16.0
./usr/lib/i386/libdes.so.16
./usr/lib/i386/libdes.so.16.0
./usr/lib/i386/libssl.so.16
./usr/lib/i386/libssl.so.16.0
./usr/lib/libcrypto.so.16
./usr/lib/libcrypto.so.16.0
./usr/lib/libdes.so.16
./usr/lib/libdes.so.16.0
./usr/lib/libssl.so.16
./usr/lib/libssl.so.16.0
./usr/libdata/debug/lib/libcrypto.so.16.0.debug
./usr/libdata/debug/usr/lib/i386/libcrypto.so.16.0.debug
./usr/libdata/debug/usr/lib/i386/libdes.so.16.0.debug
./usr/libdata/debug/usr/lib/i386/libssl.so.16.0.debug
./usr/libdata/debug/usr/lib/libcrypto.so.16.0.debug
./usr/libdata/debug/usr/lib/libdes.so.16.0.debug
./usr/libdata/debug/usr/lib/libssl.so.16.0.debug
./usr/share/man/html1/openssl-skeyutl.html
./usr/share/man/html3/BIO_get_rpoll_descriptor.html
./usr/share/man/html3/BIO_s_dgram_pair.html
./usr/share/man/html3/BIO_sendmmsg.html
./usr/share/man/html3/CMAC_CTX.html
./usr/share/man/html3/COMP_CTX_new.html
./usr/share/man/html3/DTLSv1_get_timeout.html
./usr/share/man/html3/DTLSv1_handle_timeout.html
./usr/share/man/html3/EVP_PKEY_CTX_get_algor.html
./usr/share/man/html3/EVP_SKEY.html
./usr/share/man/html3/EVP_SKEYMGMT.html
./usr/share/man/html3/GENERAL_NAME.html
./usr/share/man/html3/OPENSSL_load_u16_le.html
./usr/share/man/html3/OPENSSL_riscvcap.html
./usr/share/man/html3/OSSL_CMP_ATAV_set0.html
./usr/share/man/html3/OSSL_CMP_ITAV_new_caCerts.html
./usr/share/man/html3/OSSL_ERR_STATE_save.html
./usr/share/man/html3/OSSL_GENERAL_NAMES_print.html
./usr/share/man/html3/OSSL_HPKE_CTX_new.html
./usr/share/man/html3/OSSL_IETF_ATTR_SYNTAX.html
./usr/share/man/html3/OSSL_IETF_ATTR_SYNTAX_print.html
./usr/share/man/html3/OSSL_INDICATOR_set_callback.html
./usr/share/man/html3/OSSL_LIB_CTX_set_conf_diagnostics.html
./usr/share/man/html3/OSSL_PARAM_print_to_bio.html
./usr/share/man/html3/OSSL_QUIC_client_method.html
./usr/share/man/html3/OSSL_sleep.html
./usr/share/man/html3/PBMAC1_get1_pbkdf2_param.html
./usr/share/man/html3/PKCS12_SAFEBAG_set0_attrs.html
./usr/share/man/html3/SSL_CTX_set1_cert_comp_preference.html
./usr/share/man/html3/SSL_CTX_set_domain_flags.html
./usr/share/man/html3/SSL_CTX_set_new_pending_conn_cb.html
./usr/share/man/html3/SSL_accept_stream.html
./usr/share/man/html3/SSL_get0_connection.html
./usr/share/man/html3/SSL_get0_group_name.html
./usr/share/man/html3/SSL_get0_peer_rpk.html
./usr/share/man/html3/SSL_get1_builtin_sigalgs.html
./usr/share/man/html3/SSL_get_conn_close_info.html
./usr/share/man/html3/SSL_get_event_timeout.html
./usr/share/man/html3/SSL_get_handshake_rtt.html
./usr/share/man/html3/SSL_get_rpoll_descriptor.html
./usr/share/man/html3/SSL_get_stream_id.html
./usr/share/man/html3/SSL_get_stream_read_state.html
./usr/share/man/html3/SSL_get_value_uint.html
./usr/share/man/html3/SSL_handle_events.html
./usr/share/man/html3/SSL_inject_net_dgram.html
./usr/share/man/html3/SSL_new_domain.html
./usr/share/man/html3/SSL_new_listener.html
./usr/share/man/html3/SSL_new_stream.html
./usr/share/man/html3/SSL_poll.html
./usr/share/man/html3/SSL_set1_initial_peer_addr.html
./usr/share/man/html3/SSL_set1_server_cert_type.html
./usr/share/man/html3/SSL_set_blocking_mode.html
./usr/share/man/html3/SSL_set_default_stream_mode.html
./usr/share/man/html3/SSL_set_incoming_stream_policy.html
./usr/share/man/html3/SSL_set_quic_tls_cbs.html
./usr/share/man/html3/SSL_set_session_secret_cb.html
./usr/share/man/html3/SSL_stream_conclude.html
./usr/share/man/html3/SSL_stream_reset.html
./usr/share/man/html3/TS_VERIFY_CTX.html
./usr/share/man/html3/X509_ACERT_add1_attr.html
./usr/share/man/html3/X509_ACERT_add_attr_nconf.html
./usr/share/man/html3/X509_ACERT_get0_holder_baseCertId.html
./usr/share/man/html3/X509_ACERT_get_attr.html
./usr/share/man/html3/X509_ACERT_print_ex.html
./usr/share/man/html3/X509_STORE_CTX_get_by_subject.html
./usr/share/man/html3/X509_get_default_cert_file.html
./usr/share/man/html7/EVP_KDF-ARGON2.html
./usr/share/man/html7/EVP_KDF-HMAC-DRBG.html
./usr/share/man/html7/EVP_KDF-PVKKDF.html
./usr/share/man/html7/EVP_KEM-EC.html
./usr/share/man/html7/EVP_KEM-ML-KEM.html
./usr/share/man/html7/EVP_KEM-X25519.html
./usr/share/man/html7/EVP_MD-KECCAK.html
./usr/share/man/html7/EVP_PKEY-ML-DSA.html
./usr/share/man/html7/EVP_PKEY-ML-KEM.html
./usr/share/man/html7/EVP_PKEY-SLH-DSA.html
./usr/share/man/html7/EVP_RAND-CRNG-TEST.html
./usr/share/man/html7/EVP_RAND-JITTER.html
./usr/share/man/html7/EVP_SIGNATURE-ML-DSA.html
./usr/share/man/html7/EVP_SIGNATURE-SLH-DSA.html
./usr/share/man/html7/OSSL_STORE-winstore.html
./usr/share/man/html7/openssl-qlog.html
./usr/share/man/html7/openssl-quic-concurrency.html
./usr/share/man/html7/openssl-quic.html
./usr/share/man/html7/ossl-guide-introduction.html
./usr/share/man/html7/ossl-guide-libcrypto-introduction.html
./usr/share/man/html7/ossl-guide-libraries-introduction.html
./usr/share/man/html7/ossl-guide-libssl-introduction.html
./usr/share/man/html7/ossl-guide-migration.html
./usr/share/man/html7/ossl-guide-quic-client-block.html
./usr/share/man/html7/ossl-guide-quic-client-non-block.html
./usr/share/man/html7/ossl-guide-quic-introduction.html
./usr/share/man/html7/ossl-guide-quic-multi-stream.html
./usr/share/man/html7/ossl-guide-quic-server-block.html
./usr/share/man/html7/ossl-guide-quic-server-non-block.html
./usr/share/man/html7/ossl-guide-tls-client-block.html
./usr/share/man/html7/ossl-guide-tls-client-non-block.html
./usr/share/man/html7/ossl-guide-tls-introduction.html
./usr/share/man/html7/ossl-guide-tls-server-block.html
./usr/share/man/html7/provider-skeymgmt.html
./usr/share/man/man1/openssl-skeyutl.1
./usr/share/man/man3/BIO_get_rpoll_descriptor.3
./usr/share/man/man3/BIO_s_dgram_pair.3
./usr/share/man/man3/BIO_sendmmsg.3
./usr/share/man/man3/CMAC_CTX.3
./usr/share/man/man3/COMP_CTX_new.3
./usr/share/man/man3/DTLSv1_get_timeout.3
./usr/share/man/man3/DTLSv1_handle_timeout.3
./usr/share/man/man3/EVP_PKEY_CTX_get_algor.3
./usr/share/man/man3/EVP_SKEY.3
./usr/share/man/man3/EVP_SKEYMGMT.3
./usr/share/man/man3/GENERAL_NAME.3
./usr/share/man/man3/OPENSSL_load_u16_le.3
./usr/share/man/man3/OPENSSL_riscvcap.3
./usr/share/man/man3/OSSL_CMP_ATAV_set0.3
./usr/share/man/man3/OSSL_CMP_ITAV_new_caCerts.3
./usr/share/man/man3/OSSL_ERR_STATE_save.3
./usr/share/man/man3/OSSL_GENERAL_NAMES_print.3
./usr/share/man/man3/OSSL_HPKE_CTX_new.3
./usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX.3
./usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_print.3
./usr/share/man/man3/OSSL_INDICATOR_set_callback.3
./usr/share/man/man3/OSSL_LIB_CTX_set_conf_diagnostics.3
./usr/share/man/man3/OSSL_PARAM_print_to_bio.3
./usr/share/man/man3/OSSL_QUIC_client_method.3
./usr/share/man/man3/OSSL_sleep.3
./usr/share/man/man3/PBMAC1_get1_pbkdf2_param.3
./usr/share/man/man3/PKCS12_SAFEBAG_set0_attrs.3
./usr/share/man/man3/SSL_CTX_set1_cert_comp_preference.3
./usr/share/man/man3/SSL_CTX_set_domain_flags.3
./usr/share/man/man3/SSL_CTX_set_new_pending_conn_cb.3
./usr/share/man/man3/SSL_accept_stream.3
./usr/share/man/man3/SSL_get0_connection.3
./usr/share/man/man3/SSL_get0_group_name.3
./usr/share/man/man3/SSL_get0_peer_rpk.3
./usr/share/man/man3/SSL_get1_builtin_sigalgs.3
./usr/share/man/man3/SSL_get_conn_close_info.3
./usr/share/man/man3/SSL_get_event_timeout.3
./usr/share/man/man3/SSL_get_handshake_rtt.3
./usr/share/man/man3/SSL_get_rpoll_descriptor.3
./usr/share/man/man3/SSL_get_stream_id.3
./usr/share/man/man3/SSL_get_stream_read_state.3
./usr/share/man/man3/SSL_get_value_uint.3
./usr/share/man/man3/SSL_handle_events.3
./usr/share/man/man3/SSL_inject_net_dgram.3
./usr/share/man/man3/SSL_new_domain.3
./usr/share/man/man3/SSL_new_listener.3
./usr/share/man/man3/SSL_new_stream.3
./usr/share/man/man3/SSL_poll.3
./usr/share/man/man3/SSL_set1_initial_peer_addr.3
./usr/share/man/man3/SSL_set1_server_cert_type.3
./usr/share/man/man3/SSL_set_blocking_mode.3
./usr/share/man/man3/SSL_set_default_stream_mode.3
./usr/share/man/man3/SSL_set_incoming_stream_policy.3
./usr/share/man/man3/SSL_set_quic_tls_cbs.3
./usr/share/man/man3/SSL_set_session_secret_cb.3
./usr/share/man/man3/SSL_stream_conclude.3
./usr/share/man/man3/SSL_stream_reset.3
./usr/share/man/man3/TS_VERIFY_CTX.3
./usr/share/man/man3/X509_ACERT_add1_attr.3
./usr/share/man/man3/X509_ACERT_add_attr_nconf.3
./usr/share/man/man3/X509_ACERT_get0_holder_baseCertId.3
./usr/share/man/man3/X509_ACERT_get_attr.3
./usr/share/man/man3/X509_ACERT_print_ex.3
./usr/share/man/man3/X509_STORE_CTX_get_by_subject.3
./usr/share/man/man3/X509_get_default_cert_file.3
./usr/share/man/man7/EVP_KDF-ARGON2.7
./usr/share/man/man7/EVP_KDF-HMAC-DRBG.7
./usr/share/man/man7/EVP_KDF-PVKKDF.7
./usr/share/man/man7/EVP_KEM-EC.7
./usr/share/man/man7/EVP_KEM-ML-KEM.7
./usr/share/man/man7/EVP_KEM-X25519.7
./usr/share/man/man7/EVP_MD-KECCAK.7
./usr/share/man/man7/EVP_PKEY-ML-DSA.7
./usr/share/man/man7/EVP_PKEY-ML-KEM.7
./usr/share/man/man7/EVP_PKEY-SLH-DSA.7
./usr/share/man/man7/EVP_RAND-CRNG-TEST.7
./usr/share/man/man7/EVP_RAND-JITTER.7
./usr/share/man/man7/EVP_SIGNATURE-ML-DSA.7
./usr/share/man/man7/EVP_SIGNATURE-SLH-DSA.7
./usr/share/man/man7/OSSL_STORE-winstore.7
./usr/share/man/man7/openssl-qlog.7
./usr/share/man/man7/openssl-quic-concurrency.7
./usr/share/man/man7/openssl-quic.7
./usr/share/man/man7/ossl-guide-introduction.7
./usr/share/man/man7/ossl-guide-libcrypto-introduction.7
./usr/share/man/man7/ossl-guide-libraries-introduction.7
./usr/share/man/man7/ossl-guide-libssl-introduction.7
./usr/share/man/man7/ossl-guide-migration.7
./usr/share/man/man7/ossl-guide-quic-client-block.7
./usr/share/man/man7/ossl-guide-quic-client-non-block.7
./usr/share/man/man7/ossl-guide-quic-introduction.7
./usr/share/man/man7/ossl-guide-quic-multi-stream.7
./usr/share/man/man7/ossl-guide-quic-server-block.7
./usr/share/man/man7/ossl-guide-quic-server-non-block.7
./usr/share/man/man7/ossl-guide-tls-client-block.7
./usr/share/man/man7/ossl-guide-tls-client-non-block.7
./usr/share/man/man7/ossl-guide-tls-introduction.7
./usr/share/man/man7/ossl-guide-tls-server-block.7
./usr/share/man/man7/provider-skeymgmt.7
=========  end of 225 extra files  ===========


======  84 missing files in DESTDIR  ========
Files in flist but missing from DESTDIR.
File wasn't installed ?
------------------------------------------
./lib/libcrypto.so.15
./lib/libcrypto.so.15.0
./usr/include/openssl/asn1_mac.h
./usr/lib/i386/libcrypto.so.15
./usr/lib/i386/libcrypto.so.15.0
./usr/lib/i386/libdes.so.15
./usr/lib/i386/libdes.so.15.0
./usr/lib/i386/libssl.so.15
./usr/lib/i386/libssl.so.15.0
./usr/lib/libcrypto.so.15
./usr/lib/libcrypto.so.15.0
./usr/lib/libdes.so.15
./usr/lib/libdes.so.15.0
./usr/lib/libssl.so.15
./usr/lib/libssl.so.15.0
./usr/libdata/debug/lib/libcrypto.so.15.0.debug
./usr/libdata/debug/usr/lib/i386/libcrypto.so.15.0.debug
./usr/libdata/debug/usr/lib/i386/libdes.so.15.0.debug
./usr/libdata/debug/usr/lib/i386/libssl.so.15.0.debug
./usr/libdata/debug/usr/lib/libcrypto.so.15.0.debug
./usr/libdata/debug/usr/lib/libdes.so.15.0.debug
./usr/libdata/debug/usr/lib/libssl.so.15.0.debug
./usr/share/man/html3/EVP_PKEY_cmp.html
./usr/share/man/html3/EVP_aes.html
./usr/share/man/html3/EVP_aria.html
./usr/share/man/html3/EVP_camellia.html
./usr/share/man/html3/EVP_des.html
./usr/share/man/html3/OPENSSL_VERSION_NUMBER.html
./usr/share/man/html3/RAND_DRBG_generate.html
./usr/share/man/html3/RAND_DRBG_get0_master.html
./usr/share/man/html3/RAND_DRBG_new.html
./usr/share/man/html3/RAND_DRBG_reseed.html
./usr/share/man/html3/RAND_DRBG_set_callbacks.html
./usr/share/man/html3/RAND_DRBG_set_ex_data.html
./usr/share/man/html3/SSL_CTX_set_client_CA_list.html
./usr/share/man/html3/SSL_CTX_set_ex_data.html
./usr/share/man/html3/SSL_SESSION_get_ex_data.html
./usr/share/man/html3/SSL_get_client_CA_list.html
./usr/share/man/html3/SSL_get_server_tmp_key.html
./usr/share/man/html3/TS_VERIFY_CTX_set_certs.html
./usr/share/man/html3/d2i_DHparams.html
./usr/share/man/html3/openssl_HMAC.html
./usr/share/man/html3/openssl_MD2.html
./usr/share/man/html3/openssl_MD4.html
./usr/share/man/html3/openssl_MD5.html
./usr/share/man/html5/openssl.cnf.html
./usr/share/man/html7/Ed25519.html
./usr/share/man/html7/RAND_DRBG.html
./usr/share/man/html7/SM2.html
./usr/share/man/html7/crypto.html
./usr/share/man/html7/migration_guide.html
./usr/share/man/html7/scrypt.html
./usr/share/man/html7/ssl.html
./usr/share/man/man3/EVP_PKEY_cmp.3
./usr/share/man/man3/EVP_aes.3
./usr/share/man/man3/EVP_aria.3
./usr/share/man/man3/EVP_camellia.3
./usr/share/man/man3/EVP_des.3
./usr/share/man/man3/OPENSSL_VERSION_NUMBER.3
./usr/share/man/man3/RAND_DRBG_generate.3
./usr/share/man/man3/RAND_DRBG_get0_master.3
./usr/share/man/man3/RAND_DRBG_new.3
./usr/share/man/man3/RAND_DRBG_reseed.3
./usr/share/man/man3/RAND_DRBG_set_callbacks.3
./usr/share/man/man3/RAND_DRBG_set_ex_data.3
./usr/share/man/man3/SSL_CTX_set_client_CA_list.3
./usr/share/man/man3/SSL_CTX_set_ex_data.3
./usr/share/man/man3/SSL_SESSION_get_ex_data.3
./usr/share/man/man3/SSL_get_client_CA_list.3
./usr/share/man/man3/SSL_get_server_tmp_key.3
./usr/share/man/man3/TS_VERIFY_CTX_set_certs.3
./usr/share/man/man3/d2i_DHparams.3
./usr/share/man/man3/openssl_HMAC.3
./usr/share/man/man3/openssl_MD2.3
./usr/share/man/man3/openssl_MD4.3
./usr/share/man/man3/openssl_MD5.3
./usr/share/man/man5/openssl.cnf.5
./usr/share/man/man7/Ed25519.7
./usr/share/man/man7/RAND_DRBG.7
./usr/share/man/man7/SM2.7
./usr/share/man/man7/crypto.7
./usr/share/man/man7/migration_guide.7
./usr/share/man/man7/scrypt.7
./usr/share/man/man7/ssl.7
========  end of 84 missing files  ==========

*** Error code 1

Stop.
make[1]: stopped making "checkflist" in /usr/netbsd/current/src/distrib/sets
*** Error code 1

Stop.
make: stopped making "buildworld" in /usr/netbsd/current/src
>How-To-Repeat:
make buildworld
>Fix:
Add and remove files from the file lists.