Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 25 Aug 2016 14:59:13 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 212149] security/strongswan incompatibility with libressl 2.4
Message-ID:  <bug-212149-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D212149

            Bug ID: 212149
           Summary: security/strongswan incompatibility with libressl 2.4
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs@FreeBSD.org
          Reporter: bsd@abinet.ru
                CC: strongswan@Nanoteq.com
             Flags: maintainer-feedback?(strongswan@Nanoteq.com)
                CC: strongswan@Nanoteq.com

Looks like we have a regression after libressl 2.4 update
I see following errors in console

Aug 25 17:14:59 sphinx charon: 00[LIB] plugin 'openssl' failed to load:
/usr/local/lib/ipsec/plugins/libstrongswan-openssl.so: Undefined symbol
"CMS_RecipientInfo_ktri_get0_signer_id"

Aug 25 17:14:59 sphinx charon: 05[IKE] configured DH group MODP_3072 not
supported

IKE_SA can't be established with these.=20

The workaround is to rollback to 2.3.7 or link against base.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-212149-13>