> On Feb 10, 2017, at 3:11 PM, Lee Bast <[email protected]> wrote:
> 
>       I've just been trying to do a new setup of a freshly installed system 
> (macOS 10.12.3, Xcode 8.2.1) with MacPorts with just libressl and python 
> installed so far, but cannot install openssh with libressl. I have verified 
> this on two separate machines. Starting from scratch with nothing installed, 
> port installing openssh alone (which calls openssl) succeeds, but first 
> installing libressl (and only libressl) and then attempting the same port 
> install of openssh fails. main.log and config.log attached, though one 
> relevant error might be:
> 
>> 1084 :info:configure checking whether getpgrp requires zero arguments... yes
>> 1085 :info:configure checking OpenSSL header version... not found
>> 1086 :info:configure configure: error: OpenSSL version header not found.
>> 1087 :info:configure Command failed:  cd 
>> "/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macpo
>>      rts_release_tarballs_ports_net_openssh/openssh/work/openssh-7.3p1" && 
>> ./configure --prefix=/opt/local --with-ssl-dir=/opt/l     ocal 
>> --sysconfdir=/opt/local/etc/ssh --with-privsep-path=/var/empty 
>> --with-md5-passwords --with-pid-dir=/opt/local/var/run      --with-pam 
>> --mandir=/opt/local/share/man --with-zlib=/opt/local --with-libedit 
>> --with-pie --with-xauth=/opt/local/bin/xauth      
>> --with-kerberos5=/opt/local --with-4in6 --with-audit=bsm 
>> --with-keychain=apple --disable-utmp --disable-wtmp --with-privse     
>> p-user=_sshd --with-ldns
>> 1088 :info:configure Exit code: 1
>> 1089 :error:configure Failed to configure openssh, consult 
>> /opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.m     
>> acports.org_macports_release_tarballs_ports_net_openssh/openssh/work/openssh-7.3p1/config.log
>> 1090 :error:configure Failed to configure openssh: configure failure: 
>> command execution failed
>> 1091 :debug:configure Error code: NONE
>> 1092 :debug:configure Backtrace: configure failure: command execution failed
>> 1093 :debug:configure     while executing
>> 1094 :debug:configure "$procedure $targetname"
>> 1095 :error:configure See 
>> /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openssh/openssh/main.log
>>  for details.
> 
> I haven't been able to diagnose a solution beyond simply not using LibreSSL 
> at all, which isn't really ideal. I found a few general references to this 
> header error issue on other platforms over the last few years that came from 
> LibreSSL/OpenSSL not being compiled as a position-independent library (using 
> -fPIC) and OpenSSH thus having trouble linking (see 
> http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/INSTALL ), and MacPorts' 
> OpenSSH portfile does specifically have --with-pie as it should. I didn't see 
> fPIC called explicitly in the libressl portfile, and I wasn't sure if it was 
> bringing in that for CFLAGS from a default somewhere. The MacPorts guide 
> (https://guide.macports.org/chunked//reference.phases.html) seems to indicate 
> that the only default for configure.cflags is using the default optflags, 
> which is just -O2. However, I tried to test it by making a customized local 
> portfile to test (just duplicating the libressl portfile and adding 
> configure.cflags-append -fPIC) with no success, so this may have nothing to 
> do with it despite similar symptoms.
> 
> I don't recall seeing this before, and I think at least that MacPorts in 
> general is supposed to be able to use LibreSSL? Is anyone else seeing this or 
> have any suggestions to try next?

Yes, it is supposed to work. Please file a new ticket in the Macports Trac [1] 
if it is not building for you with libressl. 


[1] <https://trac.macports.org/newticket>

Reply via email to