Bug #129739 for Net-SSLeay: Net-SSLeay wont compile with libressl

Mon Jun 03 13:09:05 2019 denissalem [...] tuxfamily.org - Ticket created

Subject:	Net-SSLeay wont compile with libressl
Date:	Mon, 03 Jun 2019 18:37:28 +0200
To:	bug-Net-SSLeay [...] rt.cpan.org
From:	denissalem [...] tuxfamily.org

Hello there, I would like to report the following issue. On my Gentoo box, with with perl 5.30.0 and using libressl-2.9.2 in replacement of OpenSSL. It appears that Net-SSLeay wont compile. See attached log there: https://gist.github.com/DenisSalem/634196f67ecade38e8105806e86f35d7 The specific error is x86_64-pc-linux-gnu-gcc -c -fwrapv -fno-strict-aliasing -pipe -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -march=native -O2 -pipe -DVERSION=\"1.85\" -DXS_VERSION=\"1.85\" -fPIC "-I/usr/lib64/perl5/5.30.0/x86_64-linux/CORE" SSLeay.c SSLeay.xs: In function ‘XS_Net__SSLeay_get_keyblock_size’: SSLeay.xs:5685:21: error: ‘struct ssl3_state_st’ has no member named ‘tmp’ md_size = s->s3->tmp.new_mac_secret_size; It happens for both version 1.820.0 and 1.850. Thank you for your time! Denis

Mon Jun 03 13:26:31 2019 chrisn [...] cpan.org - Correspondence added

Thanks for the report, Denis. On Mon Jun 03 18:09:05 2019, denissalem@tuxfamily.org wrote: Show quoted text

> On my Gentoo box, with with perl 5.30.0 and using libressl-2.9.2 in > replacement of OpenSSL. It appears that Net-SSLeay wont compile. See > attached log there: > > https://gist.github.com/DenisSalem/634196f67ecade38e8105806e86f35d7 > > The specific error is > > x86_64-pc-linux-gnu-gcc -c -fwrapv -fno-strict-aliasing -pipe > -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -march=native -O2 -pipe > -DVERSION=\"1.85\" -DXS_VERSION=\"1.85\" -fPIC > "-I/usr/lib64/perl5/5.30.0/x86_64-linux/CORE" SSLeay.c > SSLeay.xs: In function ‘XS_Net__SSLeay_get_keyblock_size’: > SSLeay.xs:5685:21: error: ‘struct ssl3_state_st’ has no member named > ‘tmp’ > md_size = s->s3->tmp.new_mac_secret_size; > > It happens for both version 1.820.0 and 1.850.

Net-SSLeay <= 1.85 is indeed incompatible with LibreSSL 2.9 for the reason you pointed out --- Alexander Bluhm, one of the OpenBSD developers, sent us a patch [1] that fixes this problem, which was included as part of Net-SSLeay 1.88 [2]. It seems that 1.88 isn't officially available through Portage at the moment, but we did some work to get the test suite passing on Gentoo [3] and in the process confirmed that 1.88 works fine (with some minor edits to the Gentoo-specific patches, to account for changes we made to the Net-SSLeay build system between 1.85 and 1.88). [1] https://github.com/radiator-software/p5-net-ssleay/commit/3bea4ab4511789d28522e4ec154d2c3682568784 [2] https://metacpan.org/release/CHRISN/Net-SSLeay-1.88 [3] https://rt.cpan.org/Ticket/Display.html?id=128207

Mon Jun 03 13:26:31 2019 The RT System itself - Status changed from 'new' to 'open'

Mon Jun 03 13:26:32 2019 chrisn [...] cpan.org - Status changed from 'open' to 'rejected'

Mon Jun 03 13:26:32 2019 chrisn [...] cpan.org - Fixed in 1.86_07 added

Mon Jun 03 15:22:33 2019 denissalem [...] tuxfamily.org - Correspondence added

Subject:	Re: Re: [rt.cpan.org #129739] Net-SSLeay wont compile with libressl
Date:	Mon, 03 Jun 2019 21:22:08 +0200
To:	bug-Net-SSLeay [...] rt.cpan.org
From:	denissalem [...] tuxfamily.org

Thank you very much for your quick response! I will investigate the patch and wait for the package update available on Gentoo. Denis. On 2019-06-03 19:26, Chris Novakovic via RT wrote: Show quoted text

> <URL: https://rt.cpan.org/Ticket/Display.html?id=129739 > > > Thanks for the report, Denis. > > On Mon Jun 03 18:09:05 2019, denissalem@tuxfamily.org wrote:

>> On my Gentoo box, with with perl 5.30.0 and using libressl-2.9.2 in >> replacement of OpenSSL. It appears that Net-SSLeay wont compile. See >> attached log there: >> >> https://gist.github.com/DenisSalem/634196f67ecade38e8105806e86f35d7 >> >> The specific error is >> >> x86_64-pc-linux-gnu-gcc -c -fwrapv -fno-strict-aliasing -pipe >> -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -march=native -O2 -pipe >> -DVERSION=\"1.85\" -DXS_VERSION=\"1.85\" -fPIC >> "-I/usr/lib64/perl5/5.30.0/x86_64-linux/CORE" SSLeay.c >> SSLeay.xs: In function ‘XS_Net__SSLeay_get_keyblock_size’: >> SSLeay.xs:5685:21: error: ‘struct ssl3_state_st’ has no member named >> ‘tmp’ >> md_size = s->s3->tmp.new_mac_secret_size; >> >> It happens for both version 1.820.0 and 1.850.

> > Net-SSLeay <= 1.85 is indeed incompatible with LibreSSL 2.9 for the > reason you pointed out --- Alexander Bluhm, one of the OpenBSD > developers, sent us a patch [1] that fixes this problem, which was > included as part of Net-SSLeay 1.88 [2]. It seems that 1.88 isn't > officially available through Portage at the moment, but we did some > work to get the test suite passing on Gentoo [3] and in the process > confirmed that 1.88 works fine (with some minor edits to the > Gentoo-specific patches, to account for changes we made to the > Net-SSLeay build system between 1.85 and 1.88). > > [1] > https://github.com/radiator-software/p5-net-ssleay/commit/3bea4ab4511789d28522e4ec154d2c3682568784 > [2] https://metacpan.org/release/CHRISN/Net-SSLeay-1.88 > [3] https://rt.cpan.org/Ticket/Display.html?id=128207