This also unbreaks net/gajim using encryption, which is the real case
that I care about :).


On 2017 Jan 03 (Tue) at 10:49:55 +0100 (+0100), Peter Hessler wrote:
:Ugly patch to get py-cryptography loading again after the Symbol
:massacre in libressl.  (the #ifdef trick didn't work, so yolo)
:
:OK?
:
:
:Index: security/py-cryptography/Makefile
:===================================================================
:RCS file: /cvs/ports/security/py-cryptography/Makefile,v
:retrieving revision 1.17
:diff -u -p -u -p -r1.17 Makefile
:--- security/py-cryptography/Makefile  9 Nov 2016 11:46:28 -0000       1.17
:+++ security/py-cryptography/Makefile  3 Jan 2017 09:47:28 -0000
:@@ -3,6 +3,7 @@
: COMMENT=      cryptographic recipes and primitives for Python
: 
: MODPY_EGG_VERSION=    1.5.3
:+REVISION=     0
: DISTNAME=     cryptography-${MODPY_EGG_VERSION}
: PKGNAME=      ${MODPY_PY_PREFIX}${DISTNAME}
: CATEGORIES=   security devel
:Index: security/py-cryptography/patches/patch-src__cffi_src_openssl_x509_vfy_py
:===================================================================
:RCS file: 
/cvs/ports/security/py-cryptography/patches/patch-src__cffi_src_openssl_x509_vfy_py,v
:retrieving revision 1.1
:diff -u -p -u -p -r1.1 patch-src__cffi_src_openssl_x509_vfy_py
:--- security/py-cryptography/patches/patch-src__cffi_src_openssl_x509_vfy_py   
8 Nov 2016 15:37:59 -0000       1.1
:+++ security/py-cryptography/patches/patch-src__cffi_src_openssl_x509_vfy_py   
3 Jan 2017 09:47:28 -0000
:@@ -16,9 +16,20 @@ Members: 
:       x509_vfy.h:1.16->1.17 
:       x509_vpm.c:1.11->1.12 
: 
:---- src/_cffi_src/openssl/x509_vfy.py.orig    Mon Sep 26 21:22:21 2016
:-+++ src/_cffi_src/openssl/x509_vfy.py Tue Nov  8 15:31:14 2016
:-@@ -207,10 +207,12 @@ static const long X509_V_ERR_SUITE_B_INVALID_CURVE = 0
:+--- src/_cffi_src/openssl/x509_vfy.py.orig    Sun Nov  6 04:05:05 2016
:++++ src/_cffi_src/openssl/x509_vfy.py Tue Jan  3 10:39:23 2017
:+@@ -187,10 +187,6 @@ void X509_STORE_CTX_set0_crls(X509_STORE_CTX *,
:+ int X509_VERIFY_PARAM_set1_host(X509_VERIFY_PARAM *, const char *,
:+                                 size_t);
:+ void X509_VERIFY_PARAM_set_hostflags(X509_VERIFY_PARAM *, unsigned int);
:+-int X509_VERIFY_PARAM_set1_email(X509_VERIFY_PARAM *, const char *,
:+-                                 size_t);
:+-int X509_VERIFY_PARAM_set1_ip(X509_VERIFY_PARAM *, const unsigned char *,
:+-                              size_t);
:+ int X509_VERIFY_PARAM_set1_ip_asc(X509_VERIFY_PARAM *, const char *);
:+ """
:+ 
:+@@ -207,10 +203,12 @@ static const long X509_V_ERR_SUITE_B_INVALID_CURVE = 0
:  static const long X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM = 0;
:  static const long X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED = 0;
:  static const long X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256 = 0;
:@@ -31,7 +42,7 @@ Members: 
:  
:  /* OpenSSL 1.0.2beta2+ verification parameters */
:  #if CRYPTOGRAPHY_OPENSSL_102BETA2_OR_GREATER && \
:-@@ -226,10 +228,12 @@ static const long X509_V_FLAG_SUITEB_128_LOS = 0;
:+@@ -226,10 +224,12 @@ static const long X509_V_FLAG_SUITEB_128_LOS = 0;
:  
:  int (*X509_VERIFY_PARAM_set1_host)(X509_VERIFY_PARAM *, const char *,
:                                     size_t) = NULL;
:
:
:-- 
:Barometer, n.:
:       An ingenious instrument which indicates what kind of weather we
:are having.
:               -- Ambrose Bierce, "The Devil's Dictionary"
:

-- 
Political T.V. commercials prove one thing: some candidates can tell
all their good points and qualifications in just 30 seconds.

Reply via email to