upstream/opnsense-src
1
0
Fork 0
mirror of https://github.com/opnsense/src.git synced 2026-06-11 09:41:03 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Makefile.inc1: Build openssl as a certctl dependency on old FreeBSD

Browse source 
X509_NAME_hash_ex() is not available in OpenSSL 1.x.

Reviewed by:	des
Reported by:	syzbot+54c1e57e7184582a8f59@syzkaller.appspotmail.com
Fixes:		c340ef28fd ("certctl: Reimplement in C")
Differential Revision:	https://reviews.freebsd.org/D52291
This commit is contained in:
Mark Johnston 2025-09-03 16:14:37 +00:00
parent e26521574e
commit 13e7b21901
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
Makefile.inc1
View file

@ -2714,9 +2714,10 @@ _basic_bootstrap_tools+=usr.sbin/tzsetup
# certctl is needed as an install tool. libcrypto is rather heavy, so we'll
# build that alongside it only for platforms that don't expose headers for
# OpenSSL, like macOS.
# OpenSSL, like macOS, or when building on releases with OpenSSL 1.x.
.if ${MK_CAROOT} != "no" && ${MK_OPENSSL} != "no"
.if ${.MAKE.OS} == "Darwin"
.if ${.MAKE.OS} == "Darwin" || \
(${.MAKE.OS} == "FreeBSD" && ${BOOTSTRAPPING} < 1400000)
_bootstrap_libcrypto=secure/lib/libcrypto
${_bt}-usr.sbin/certctl: ${_bt}-secure/lib/libcrypto
.endif