Re: lib/60511: openssl set lists differences to pkgsrc

> Date: Mon Jul 27 15:45:00 +0000 2026
> From: Thomas Klausner <[email protected]>
>=20
> I compared the pkgsrc PLIST with the source set lists and found the
> following differences:
>=20
> Only pkgsrc (openssl 3.6.3, but this didn't change since 3.5.3)
> installs:
>=20
> include/openssl/byteorder.h
> include/openssl/hpke.h
> include/openssl/ml_kem.h

We should double-check the list of installed header files from the
same version of OpenSSL as in src (3.5.7).

This is going to be a big pain for the 11.x branch because package
builds depend on what we have in 11.0, and missing files will start to
break things.  So either we'll have to fix it in 11.0 (hi martin!) or
put in some kind of shim package which affects the build of all
packages using OpenSSL anyway.

> Only NetBSD (openssl 3.5.7) installs:

I checked your list and the only ones I found missing from
security/openssl/PLIST are

include/openssl/asn1_mac.h
include/openssl/rand_drbg.h

which both appear to be stale in your objdir; neither one exists in
our source tree any more (that is, crypto/external/apache2/openssl/;
crypto/external/bsd/openssl/ and crypto/external/bsd/openssl.old/ --
why do we still have both of those? -- still have asn1_mac.h, and
openssl.old still has rand_drbg.h).

Actually, rand_drbg.h has an obsolete entry, so I'm not sure why you
found it at all:

./usr/include/openssl/asn1_mac.h                comp-c-include          ope=
nssl=3D11
./usr/include/openssl/asn1_mac.h                comp-c-include          ope=
nssl=3D30
...
./usr/include/openssl/rand_drbg.h               comp-c-include  openssl=3D11
./usr/include/openssl/rand_drbg.h               comp-obsolete   obsolete,op=
enssl=3D30
./usr/include/openssl/rand_drbg.h               comp-obsolete   obsolete,op=
enssl=3D35