Re: Built-in OpenSSL and pkgsrc bootstrap?

[Hauke Fath <hauke%Espresso.Rhein-Neckar.DE@localhost>]

At 13:39 Uhr +0100 16.2.2009, Joerg Sonnenberger wrote:
>> An attempt to either build pkgtools/pkg_install on a previously
>> bootstrapped netbsd-1-5 machine, or re-bootstrap the machine, fails while
>> building pkg_install because of a missing <openssl/ui.h>. The openssl
>> version installed there is 0.9.6g. The missing header appeared in netbsd-2.
>
>Can you try the attached patch?

Works nicely, thanks. After supplying a missing

#ifndef NS_ANY_CA
#define NS_ANY_CA       (NS_SSL_CA | NS_SMIME_CA | NS_OBJSIGN_CA)
#endif

in the same file, I ran into

[...]
ranlib libinstall.a
cc -DHAVE_CONFIG_H -DOPSYS_NAME=\"NetBSD\" -DMACHINE_ARCH=\"m68k\"
-DBINDIR=\"/usr/pkg/sbin\" -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FIL
E_OFFSET_BITS=64 -DDEF_UMASK=0022
-I/var/obj/pkgsrc/pkgtools/pkg_install/work/bzip2
-I/var/obj/pkgsrc/pkgtools/pkg_install/work/libarch
ive/libarchive -I/var/obj/pkgsrc/pkgtools/pkg_install/work/libfetch
-DHAVE_NBCOMPAT_H=1 -I/var/obj/pkgsrc/pkgtools/pkg_install/work/lib
nbcompat -I/usr/include -I. -I. -I../lib -O2 -pipe -I/usr/include -c main.c
cc -DHAVE_CONFIG_H -DOPSYS_NAME=\"NetBSD\" -DMACHINE_ARCH=\"m68k\"
-DBINDIR=\"/usr/pkg/sbin\" -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_FIL
E_OFFSET_BITS=64 -DDEF_UMASK=0022
-I/var/obj/pkgsrc/pkgtools/pkg_install/work/bzip2
-I/var/obj/pkgsrc/pkgtools/pkg_install/work/libarch
ive/libarchive -I/var/obj/pkgsrc/pkgtools/pkg_install/work/libfetch
-DHAVE_NBCOMPAT_H=1 -I/var/obj/pkgsrc/pkgtools/pkg_install/work/lib
nbcompat -I/usr/include -I. -I. -I../lib -O2 -pipe -I/usr/include -c perform.c
cc -L/var/obj/pkgsrc/pkgtools/pkg_install/work/bzip2
-L/var/obj/pkgsrc/pkgtools/pkg_install/work/libarchive/.libs
-L/var/obj/pkgsrc/pkg
tools/pkg_install/work/libfetch
-L/var/obj/pkgsrc/pkgtools/pkg_install/work/libnbcompat -L/usr/lib
-Wl,-R/usr/lib -Wl,-R/usr/pkg/lib -L
../lib -o pkg_add main.o perform.o -linstall -lfetch -larchive -lbz2 -lz
-lcrypto -lnbcompat
file.o: warning: reference to compatibility glob(); include <glob.h> for
correct reference
pkcs7.o: Undefined symbol `_OPENSSL_cleanse' referenced from text segment
collect2: ld returned 1 exit status
*** Error code 1

which is from

 Changes between 0.9.6g and 0.9.6h  [5 Dec 2002]

  *) New function OPENSSL_cleanse(), which is used to cleanse a section of
     memory from it's contents.  This is done with a counter that will
     place alternating values in each byte.  This can be used to solve
     two issues: 1) the removal of calls to memset() by highly optimizing
     compilers, and 2) cleansing with other values than 0, since those can
     be read through on certain media, for example a swap space on disk.
     [Geoff Thorpe]

-- any quick idea on how to reasonably substitute that? Obviously the
netbsd-1-5 branch only saw security patches, not added features.

        hauke


--
"It's never straight up and down"     (DEVO)