Re: lib/60511: openssl set lists differences to pkgsrc

The following reply was made to PR lib/60511; it has been noted by GNATS.

From: Taylor R Campbell <[email protected]>
To: Thomas Klausner <[email protected]>
Cc: [email protected], [email protected],
	[email protected], [email protected], [email protected]
Subject: Re: lib/60511: openssl set lists differences to pkgsrc
Date: Wed, 29 Jul 2026 13:15:39 +0000

 > Date: Mon Jul 27 15:45:00 +0000 2026
 > From: Thomas Klausner <[email protected]>
 >=20
 > I compared the pkgsrc PLIST with the source set lists and found the
 > following differences:
 >=20
 > Only pkgsrc (openssl 3.6.3, but this didn't change since 3.5.3)
 > installs:
 >=20
 > include/openssl/byteorder.h
 > include/openssl/hpke.h
 > include/openssl/ml_kem.h
 
 We should double-check the list of installed header files from the
 same version of OpenSSL as in src (3.5.7).
 
 This is going to be a big pain for the 11.x branch because package
 builds depend on what we have in 11.0, and missing files will start to
 break things.  So either we'll have to fix it in 11.0 (hi martin!) or
 put in some kind of shim package which affects the build of all
 packages using OpenSSL anyway.
 
 > Only NetBSD (openssl 3.5.7) installs:
 
 I checked your list and the only ones I found missing from
 security/openssl/PLIST are
 
 include/openssl/asn1_mac.h
 include/openssl/rand_drbg.h
 
 which both appear to be stale in your objdir; neither one exists in
 our source tree any more (that is, crypto/external/apache2/openssl/;
 crypto/external/bsd/openssl/ and crypto/external/bsd/openssl.old/ --
 why do we still have both of those? -- still have asn1_mac.h, and
 openssl.old still has rand_drbg.h).
 
 Actually, rand_drbg.h has an obsolete entry, so I'm not sure why you
 found it at all:
 
 ./usr/include/openssl/asn1_mac.h                comp-c-include          ope=
 nssl=3D11
 ./usr/include/openssl/asn1_mac.h                comp-c-include          ope=
 nssl=3D30
 ...
 ./usr/include/openssl/rand_drbg.h               comp-c-include  openssl=3D11
 ./usr/include/openssl/rand_drbg.h               comp-obsolete   obsolete,op=
 enssl=3D30
 ./usr/include/openssl/rand_drbg.h               comp-obsolete   obsolete,op=
 enssl=3D35