This also unbreaks net/gajim using encryption, which is the real case that I care about :).
On 2017 Jan 03 (Tue) at 10:49:55 +0100 (+0100), Peter Hessler wrote: :Ugly patch to get py-cryptography loading again after the Symbol :massacre in libressl. (the #ifdef trick didn't work, so yolo) : :OK? : : :Index: security/py-cryptography/Makefile :=================================================================== :RCS file: /cvs/ports/security/py-cryptography/Makefile,v :retrieving revision 1.17 :diff -u -p -u -p -r1.17 Makefile :--- security/py-cryptography/Makefile 9 Nov 2016 11:46:28 -0000 1.17 :+++ security/py-cryptography/Makefile 3 Jan 2017 09:47:28 -0000 :@@ -3,6 +3,7 @@ : COMMENT= cryptographic recipes and primitives for Python : : MODPY_EGG_VERSION= 1.5.3 :+REVISION= 0 : DISTNAME= cryptography-${MODPY_EGG_VERSION} : PKGNAME= ${MODPY_PY_PREFIX}${DISTNAME} : CATEGORIES= security devel :Index: security/py-cryptography/patches/patch-src__cffi_src_openssl_x509_vfy_py :=================================================================== :RCS file: /cvs/ports/security/py-cryptography/patches/patch-src__cffi_src_openssl_x509_vfy_py,v :retrieving revision 1.1 :diff -u -p -u -p -r1.1 patch-src__cffi_src_openssl_x509_vfy_py :--- security/py-cryptography/patches/patch-src__cffi_src_openssl_x509_vfy_py 8 Nov 2016 15:37:59 -0000 1.1 :+++ security/py-cryptography/patches/patch-src__cffi_src_openssl_x509_vfy_py 3 Jan 2017 09:47:28 -0000 :@@ -16,9 +16,20 @@ Members: : x509_vfy.h:1.16->1.17 : x509_vpm.c:1.11->1.12 : :---- src/_cffi_src/openssl/x509_vfy.py.orig Mon Sep 26 21:22:21 2016 :-+++ src/_cffi_src/openssl/x509_vfy.py Tue Nov 8 15:31:14 2016 :-@@ -207,10 +207,12 @@ static const long X509_V_ERR_SUITE_B_INVALID_CURVE = 0 :+--- src/_cffi_src/openssl/x509_vfy.py.orig Sun Nov 6 04:05:05 2016 :++++ src/_cffi_src/openssl/x509_vfy.py Tue Jan 3 10:39:23 2017 :+@@ -187,10 +187,6 @@ void X509_STORE_CTX_set0_crls(X509_STORE_CTX *, :+ int X509_VERIFY_PARAM_set1_host(X509_VERIFY_PARAM *, const char *, :+ size_t); :+ void X509_VERIFY_PARAM_set_hostflags(X509_VERIFY_PARAM *, unsigned int); :+-int X509_VERIFY_PARAM_set1_email(X509_VERIFY_PARAM *, const char *, :+- size_t); :+-int X509_VERIFY_PARAM_set1_ip(X509_VERIFY_PARAM *, const unsigned char *, :+- size_t); :+ int X509_VERIFY_PARAM_set1_ip_asc(X509_VERIFY_PARAM *, const char *); :+ """ :+ :+@@ -207,10 +203,12 @@ static const long X509_V_ERR_SUITE_B_INVALID_CURVE = 0 : static const long X509_V_ERR_SUITE_B_INVALID_SIGNATURE_ALGORITHM = 0; : static const long X509_V_ERR_SUITE_B_LOS_NOT_ALLOWED = 0; : static const long X509_V_ERR_SUITE_B_CANNOT_SIGN_P_384_WITH_P_256 = 0; :@@ -31,7 +42,7 @@ Members: : : /* OpenSSL 1.0.2beta2+ verification parameters */ : #if CRYPTOGRAPHY_OPENSSL_102BETA2_OR_GREATER && \ :-@@ -226,10 +228,12 @@ static const long X509_V_FLAG_SUITEB_128_LOS = 0; :+@@ -226,10 +224,12 @@ static const long X509_V_FLAG_SUITEB_128_LOS = 0; : : int (*X509_VERIFY_PARAM_set1_host)(X509_VERIFY_PARAM *, const char *, : size_t) = NULL; : : :-- :Barometer, n.: : An ingenious instrument which indicates what kind of weather we :are having. : -- Ambrose Bierce, "The Devil's Dictionary" : -- Political T.V. commercials prove one thing: some candidates can tell all their good points and qualifications in just 30 seconds.