pkg/41642: OpenSSL's c_rehash can't find openssl binary (patch supplied)

[Jukka Salmi <j+nbsd%salmi.ch@localhost>]

>Number:         41642
>Category:       pkg
>Synopsis:       OpenSSL's c_rehash can't find openssl binary (patch supplied)
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jun 28 12:00:01 +0000 2009
>Originator:     Jukka Salmi
>Release:        pkgsrc HEAD
>Organization:
>Environment:
n/a
>Description:
Due to a bug in OpenSSL's c_rehash tool it can't be used on a NetBSD
system to populate /etc/openssl/certs with symlinks to the hash values
of certificates.

This problem has been [1]reported to the OpenSSL project as ticket #1901
and is fixed on the OpenSSL_1_0_0-stable branch.

[1] http://rt.openssl.org/Ticket/Display.html?id=1901
>How-To-Repeat:
Add some certificates to /etc/openssl/certs and run

$ c_rehash /etc/openssl/certs
Doing /etc/openssl/certs
sh: /root/openssl: not found
[...]
>Fix:
The following patch fixes the problem.  It's also available from
http://salmi.ch/~jukka/patches/pkgsrc/security/openssl/c_rehash.patch

Index: security/openssl/distinfo
===================================================================
RCS file: /cvsroot/pkgsrc/security/openssl/distinfo,v
retrieving revision 1.68
diff -u -p -r1.68 distinfo
--- security/openssl/distinfo   10 Jun 2009 13:57:08 -0000      1.68
+++ security/openssl/distinfo   28 Jun 2009 11:39:45 -0000
@@ -15,3 +15,5 @@ SHA1 (patch-ax) = ef0c657de2aa42baa365b9
 SHA1 (patch-ay) = 6d5de155e5508cd2237387626c8e1ff7ee603f8e
 SHA1 (patch-az) = aa7ef7192d56979ba09aa1dab8a2cdf9868f9c4a
 SHA1 (patch-ba) = b8ab55c0c6ab4b995cae18517609720f0803e11f
+SHA1 (patch-bb) = 6387d3f7febb04d4c6ae2a8ff761d9eb634e148d
+SHA1 (patch-bc) = 9e527f0844a9003f396e4bd7c3cf92c7bcf32da6
--- /dev/null   2009-06-28 13:34:43.000000000 +0200
+++ security/openssl/patches/patch-bb   2009-06-28 13:36:15.000000000 +0200
@@ -0,0 +1,12 @@
+$NetBSD$
+
+--- tools/c_rehash.orig        2009-03-25 14:11:47.000000000 +0100
++++ tools/c_rehash
+@@ -22,6 +22,7 @@ if(! -x $openssl) {
+       foreach (split /:/, $ENV{PATH}) {
+               if(-x "$_/$openssl") {
+                       $found = 1;
++                      $openssl = "$_/$openssl";
+                       last;
+               }       
+       }
--- /dev/null   2009-06-28 13:34:43.000000000 +0200
+++ security/openssl/patches/patch-bc   2009-06-28 13:36:19.000000000 +0200
@@ -0,0 +1,12 @@
+$NetBSD$
+
+--- tools/c_rehash.in.orig     2002-10-11 22:31:27.000000000 +0200
++++ tools/c_rehash.in
+@@ -22,6 +22,7 @@ if(! -x $openssl) {
+       foreach (split /:/, $ENV{PATH}) {
+               if(-x "$_/$openssl") {
+                       $found = 1;
++                      $openssl = "$_/$openssl";
+                       last;
+               }       
+       }