=> "/opt/pkg/bin/bmake" ["-C", "/data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl", "configure", "BATCH=1", "DEPENDS_TARGET=/nonexistent"] => Checksum BLAKE2s OK for cyrus-sasl-2.1.28.tar.gz => Checksum SHA512 OK for cyrus-sasl-2.1.28.tar.gz ===> Installing dependencies for cyrus-sasl-2.1.28nb2 ========================================================================== The supported build options for cyrus-sasl are: bdb gdbm ndbm The currently selected options are: ndbm You can select which build options to use by setting PKG_DEFAULT_OPTIONS or the following variable. Its current value is shown: PKG_OPTIONS.cyrus-sasl (not defined) ========================================================================== ========================================================================== The following variables will affect the build process of this package, cyrus-sasl-2.1.28nb2. Their current value is shown below: * AUTHDAEMONVAR = /var/opt/pkg/authdaemon * SASLSOCKETDIR = /var/opt/pkg/run/saslauthd * SASL_ENTROPY_SOURCE = /dev/urandom * VARBASE = /var/opt/pkg You may want to abort the process now with CTRL-C and change the value of variables in the first group before continuing. Be sure to run `/opt/pkg/bin/bmake clean' after the changes. ========================================================================== => Tool dependency libtool-base>=2.4.2nb9: found libtool-base-2.4.7nb1 => Tool dependency gmake>=3.81: found gmake-4.4.1 => Tool dependency cwrappers>=20150314: found cwrappers-20220403 => Tool dependency checkperms>=1.1: found checkperms-1.12 ===> Overriding tools for cyrus-sasl-2.1.28nb2 ===> Extracting for cyrus-sasl-2.1.28nb2 ===> Patching for cyrus-sasl-2.1.28nb2 => Applying pkgsrc patches for cyrus-sasl-2.1.28nb2 => Verifying /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-common_crypto-compat => Applying pkgsrc patch /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-common_crypto-compat Hmm... Looks like a unified diff to me... The text leading up to this was: -------------------------- |$NetBSD: patch-common_crypto-compat,v 1.1 2018/07/25 01:16:04 manu Exp $ | |Build with OpenSSL < 1.1.0 that was patched to include EVP_CIPHER_CTX_iv | |--- common/crypto-compat.h.orig 2018-07-25 01:04:30.167508411 +0000 |+++ common/crypto-compat.h 2018-07-25 01:05:02.861593517 +0000 -------------------------- Patching file common/crypto-compat.h using Plan A... Hunk #1 succeeded at 40 (offset 1 line). Hmm... The next patch looks like a unified diff to me... The text leading up to this was: -------------------------- |--- common/crypto-compat.c.orig 2018-07-25 01:04:22.770573257 +0000 |+++ common/crypto-compat.c 2018-07-25 01:04:51.178733049 +0000 -------------------------- Patching file common/crypto-compat.c using Plan A... Hunk #1 succeeded at 305 (offset -1 lines). Hunk #2 succeeded at 315 (offset -1 lines). done => Verifying /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-configure => Applying pkgsrc patch /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-configure Hmm... Looks like a unified diff to me... The text leading up to this was: -------------------------- |$NetBSD: patch-configure,v 1.2 2018/04/17 01:57:18 christos Exp $ | |--- configure.orig 2018-01-19 09:14:17.000000000 -0500 |+++ configure 2018-04-16 20:43:13.559772861 -0400 -------------------------- Patching file configure using Plan A... Hunk #1 succeeded at 6225 (offset 6 lines). Hunk #2 succeeded at 6240 (offset 6 lines). done => Verifying /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-digestmd5-legacy-rejected-pr-688 => Applying pkgsrc patch /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-digestmd5-legacy-rejected-pr-688 Hmm... Looks like a unified diff to me... The text leading up to this was: -------------------------- |$NetBSD: patch-digestmd5-legacy-rejected-pr-688,v 1.1 2025/06/01 22:05:01 thor Exp $ | |From 455417ad5d7da87d22590942a433939bdff986ca Mon Sep 17 00:00:00 2001 |From: Simo Sorce |Date: Mon, 21 Jun 2021 14:24:18 -0400 |Subject: [PATCH 1/5] Gracefully handle failed initializations | |In OpenSSL 3.0 these algorithms have been moved to the legacy provider |which is not enabled by default. This means allocation can and do fail. |Handle failed allocations by returning an actual error instead of |crashing later with a NULL context. | |Signed-off-by: Simo Sorce |--- | plugins/digestmd5.c | 16 ++++++++++++++-- | 1 file changed, 14 insertions(+), 2 deletions(-) | |diff --git a/plugins/digestmd5.c b/plugins/digestmd5.c |index c6b54317..b2617536 100644 |--- plugins/digestmd5.c |+++ plugins/digestmd5.c -------------------------- Patching file plugins/digestmd5.c using Plan A... Hunk #1 succeeded at 254. Hunk #2 succeeded at 2822. Hunk #3 succeeded at 2966. Hunk #4 succeeded at 3520. Hunk #5 succeeded at 3745. Hmm... The next patch looks like a unified diff to me... The text leading up to this was: -------------------------- | |From a7db9c89738ea7b42d6cb6eac98d8afc2653de70 Mon Sep 17 00:00:00 2001 |From: Simo Sorce |Date: Wed, 21 Jul 2021 06:05:45 -0400 |Subject: [PATCH 2/5] Catch errors from EVP_Digest* functions | |In OpenSSL 3.0 digest init can fail simply because a legacy provider is |not loaded of FIPS mode is active and the digest is not allowed. |If the errors are not handled the application may crash later trying to |access uninitialized contexts. | |Signed-off-by: Simo Sorce |--- | saslauthd/lak.c | 32 +++++++++++++++++++++++++------- | 1 file changed, 25 insertions(+), 7 deletions(-) | |diff --git a/saslauthd/lak.c b/saslauthd/lak.c |index e80b9db7..65116f72 100644 |--- saslauthd/lak.c |+++ saslauthd/lak.c -------------------------- Patching file saslauthd/lak.c using Plan A... Hunk #1 succeeded at 1806. Hmm... The next patch looks like a unified diff to me... The text leading up to this was: -------------------------- | |From 89605bb244f09ac102c69be416af9105a21828ad Mon Sep 17 00:00:00 2001 |From: Simo Sorce |Date: Wed, 21 Jul 2021 07:07:24 -0400 |Subject: [PATCH 3/5] Add a HMAC wrapper for deprecated function | |HMAC() is deprecated since 1.0, add a wrapper used when compiling |against OpenSSL 3.0+ so that we slowly move away from deprecated |functions. | |Signed-off-by: Simo Sorce |--- | plugins/scram.c | 28 ++++++++++++++++++++++++++++ | 1 file changed, 28 insertions(+) | |diff --git a/plugins/scram.c b/plugins/scram.c |index 414eb562..a79ccb9e 100644 |--- plugins/scram.c |+++ plugins/scram.c -------------------------- Patching file plugins/scram.c using Plan A... Hunk #1 succeeded at 65. Hunk #2 succeeded at 291. Hmm... The next patch looks like a unified diff to me... The text leading up to this was: -------------------------- | |From 54f69880fa92bb0d0cf4d55bab0914822a873d8d Mon Sep 17 00:00:00 2001 |From: Simo Sorce |Date: Thu, 30 Sep 2021 15:57:05 -0400 |Subject: [PATCH 4/5] Add support for loading legacy provider | |OpenSSL 3.0 is moving a number of functions into the legacy provider. |This provider is not loaded by default, so applications that need to |use legacy algorithms must either load them explicitly or admins |have to explicitly load the legacy provider to their openssl conf file. | |The latter is bad as it will enable legacy providers systam-wide, it |also requires manual intervention. Programmatically load the legacy |provider for older plugins that have no good cipher option to fall |back on. | |Signed-off-by: Simo Sorce |--- | plugins/digestmd5.c | 192 +++++++++++++++++++++++++++++++++----------- | 1 file changed, 143 insertions(+), 49 deletions(-) | |diff --git a/plugins/digestmd5.c b/plugins/digestmd5.c |index b2617536..c8bb06c6 100644 |--- plugins/digestmd5.c |+++ plugins/digestmd5.c -------------------------- Patching file plugins/digestmd5.c using Plan A... Hunk #1 succeeded at 80. Hunk #2 succeeded at 176. Hunk #3 succeeded at 271. Hunk #4 succeeded at 900. Hunk #5 succeeded at 937. Hunk #6 succeeded at 985. Hunk #7 succeeded at 999. Hunk #8 succeeded at 1018. Hunk #9 succeeded at 1058. Hunk #10 succeeded at 1105. Hunk #11 succeeded at 1114. Hunk #12 succeeded at 1134. Hunk #13 succeeded at 1201. Hunk #14 succeeded at 1264. Hunk #15 succeeded at 1293. Hunk #16 succeeded at 1301. Hunk #17 succeeded at 1424. Hunk #18 succeeded at 1439. Hunk #19 succeeded at 1464. Hunk #20 succeeded at 1484. Hmm... The next patch looks like a unified diff to me... The text leading up to this was: -------------------------- | |From 725df6cdadc11cf1bbbfa3a57982ec19624c6fbe Mon Sep 17 00:00:00 2001 |From: Simo Sorce |Date: Thu, 30 Sep 2021 17:01:14 -0400 |Subject: [PATCH 5/5] Drop RC4 custom code and "export" options. | |Drop the old custom implementation of RC4, and use the openssl one |instead. |Drop old weak "export" options that have been advertized but not really |functional/implemented for a long time. | |Signed-off-by: Simo Sorce |--- | configure.ac | 6 +- | plugins/digestmd5.c | 184 -------------------------------------------- | 2 files changed, 5 insertions(+), 185 deletions(-) | |diff --git a/configure.ac b/configure.ac |index e1bf53b6..f4606abb 100644 |--- configure.ac |+++ configure.ac -------------------------- Patching file configure.ac using Plan A... Hunk #1 succeeded at 1059 (offset -35 lines). Hmm... The next patch looks like a unified diff to me... The text leading up to this was: -------------------------- |diff --git a/plugins/digestmd5.c b/plugins/digestmd5.c |index c8bb06c6..8de9b4b8 100644 |--- plugins/digestmd5.c |+++ plugins/digestmd5.c -------------------------- Patching file plugins/digestmd5.c using Plan A... Hunk #1 succeeded at 1131. Hunk #2 succeeded at 1315. done => Verifying /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-lib_saslutil.c => Applying pkgsrc patch /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-lib_saslutil.c Hmm... Looks like a unified diff to me... The text leading up to this was: -------------------------- |$NetBSD: patch-lib_saslutil.c,v 1.1 2025/04/08 00:57:13 maya Exp $ | |Don't guard the inclusion of time.h for two reasons: |1. It's a standard C header |2. There's no configure check for HAVE_TIME_H |(Shows up as a build failure on Fedora 41) | |--- lib/saslutil.c.orig 2025-04-08 00:49:52.888164546 +0000 |+++ lib/saslutil.c -------------------------- Patching file lib/saslutil.c using Plan A... Hunk #1 succeeded at 59. done => Verifying /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-plugins_otp.c => Applying pkgsrc patch /data/jenkins/workspace/pkgsrc-upstream-trunk/security/cyrus-sasl/../../security/cyrus-sasl/patches/patch-plugins_otp.c Hmm... Looks like a unified diff to me... The text leading up to this was: -------------------------- |$NetBSD: patch-plugins_otp.c,v 1.2 2018/04/17 01:57:18 christos Exp $ | |Fix the OTP plugin on 32 bit machines and add SHA2 support |Submitted upstream as https://bugzilla.cyrusimap.org/show_bug.cgi?id=3914 | |--- plugins/otp.c.orig 2016-12-10 10:54:27.000000000 -0500 |+++ plugins/otp.c 2018-04-16 20:09:59.910785912 -0400 -------------------------- Patching file plugins/otp.c using Plan A... Hunk #1 succeeded at 91. Hunk #2 succeeded at 710. done ===> Creating toolchain wrappers for cyrus-sasl-2.1.28nb2 ===> Configuring for cyrus-sasl-2.1.28nb2 => Substituting "saslauthd" in Makefile.in => Modifying GNU configure scripts to avoid --recheck => Replacing config-guess with pkgsrc versions => Replacing config-sub with pkgsrc versions => Replacing install-sh with pkgsrc version => Adding run-time search paths to pkg-config files. => Checking for portability problems in extracted files configure: WARNING: unrecognized options: --disable-java configure: creating cache ./config.cache checking build system type... x86_64-sun-solaris2.11 checking host system type... x86_64-sun-solaris2.11 checking target system type... x86_64-sun-solaris2.11 checking for a BSD-compatible install... /opt/pkg/bin/bsdinstall -c -o pbulk -g pbulk checking whether build environment is sane... yes checking for a thread-safe mkdir -p... config/install-sh -c -d checking for gawk... /usr/bin/nawk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking whether UID '500' is supported by ustar format... yes checking whether GID '500' is supported by ustar format... yes checking how to create a ustar tar archive... gnutar checking for x86_64-sun-solaris2.11-gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking whether make supports the include directive... yes (GNU style) checking dependency style of gcc... gcc3 checking how to run the C preprocessor... gcc -E checking for gcc... gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... (cached) none needed checking whether gcc understands -c and -o together... (cached) yes checking dependency style of gcc... (cached) gcc3 checking how to run the C preprocessor... gcc -E checking how to run the C preprocessor... gcc -E checking for gawk... (cached) /usr/bin/nawk checking whether ln -s works... yes checking whether make sets $(MAKE)... (cached) yes checking for grep that handles long lines and -e... (cached) /usr/xpg4/bin/grep checking for egrep... (cached) /usr/xpg4/bin/grep -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking minix/config.h usability... no checking minix/config.h presence... no checking for minix/config.h... no checking whether it is safe to define __EXTENSIONS__... yes checking for runpath switch... -Wl,-rpath, checking how to print strings... printf checking for a sed that does not truncate output... /usr/bin/sed checking for fgrep... /usr/xpg4/bin/grep -F checking for ld used by gcc... /bin/ld checking if the linker (/bin/ld) is GNU ld... no checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -p checking the name lister (/usr/bin/nm -p) interface... BSD nm checking the maximum length of command line arguments... 786240 checking how to convert x86_64-sun-solaris2.11 file names to x86_64-sun-solaris2.11 format... func_convert_file_noop checking how to convert x86_64-sun-solaris2.11 file names to toolchain format... func_convert_file_noop checking for /bin/ld option to reload object files... -r checking for x86_64-sun-solaris2.11-objdump... no checking for objdump... objdump checking how to recognize dependent libraries... pass_all checking for x86_64-sun-solaris2.11-dlltool... no checking for dlltool... no checking how to associate runtime and link libraries... printf %s\n checking for x86_64-sun-solaris2.11-ar... no checking for ar... ar checking for archiver @FILE support... no checking for x86_64-sun-solaris2.11-strip... no checking for strip... strip checking for x86_64-sun-solaris2.11-ranlib... no checking for ranlib... ranlib checking command to parse /usr/bin/nm -p output from gcc object... ok checking for sysroot... no checking for a working dd... /usr/bin/dd checking how to truncate binary pipes... /usr/bin/dd bs=4096 count=1 checking for x86_64-sun-solaris2.11-mt... no checking for mt... mt checking if mt is a manifest tool... no checking for dlfcn.h... yes checking for objdir... .libs checking if gcc supports -fno-rtti -fno-exceptions... no checking for gcc option to produce PIC... -fPIC -DPIC checking if gcc PIC flag -fPIC -DPIC works... yes checking if gcc static flag -static works... no checking if gcc supports -c -o file.o... rm: conftest*: No such file or directory yes checking if gcc supports -c -o file.o... (cached) yes checking whether the gcc linker (/bin/ld -64) supports shared libraries... yes checking whether -lc should be explicitly linked in... rm: conftest*: No such file or directory no checking dynamic linker characteristics... solaris2.11 ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... no checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... no checking sys/socket.h usability... yes checking sys/socket.h presence... yes checking for sys/socket.h... yes checking ws2tcpip.h usability... no checking ws2tcpip.h presence... no checking for ws2tcpip.h... no checking for socket... no checking for socket in -lsocket... yes checking for connect... no checking for gethostbyname in -lnsl... yes checking for connect in -lsocket... yes checking for res_search... no checking for dn_expand... no checking for dns_lookup... no checking DB path to use... /etc/opt/pkg/sasl2/sasldb checking ndbm.h usability... yes checking ndbm.h presence... yes checking for ndbm.h... yes checking for dbm_open in -lndbm... no checking for dbm_open... yes checking DB library to use... ndbm checking if DB handle is kept open in SASLDB... no checking for dlopen in -ldl... yes checking PRNG to use... /dev/urandom checking for nm... /usr/bin/nm -p checking for underscore before symbols... no checking for syslog... yes checking if I should include saslauthd... /var/opt/pkg/run/saslauthd checking to include Courier authdaemond support... /var/opt/pkg/authdaemon/socket checking if I should include pwcheck... no checking if I should include the alwaystrue verifier... no checking if we should enable sasl_checkapop... enabled checking CRAM-MD5... disabled checking size of long... 8 checking what directory libraries are found in... lib checking for OpenSSL... no checking for des_cbc_encrypt in -ldes... no checking for des_cbc_encrypt in -ldes425... no checking for des_cbc_encrypt in -ldes524... no checking for RSAPublicEncrypt in -lrsaref... no checking for des_cbc_encrypt in -lcrypto... no checking DIGEST-MD5... disabled configure: WARNING: OpenSSL not found -- SCRAM will be disabled checking SCRAM... disabled configure: WARNING: OpenSSL not found -- OTP will be disabled checking OTP... disabled configure: WARNING: OpenSSL not found -- SRP will be disabled checking SRP... disabled checking KERBEROS_V4... disabled checking for crypt... yes checking GSSAPI... disabled checking for crypt... (cached) yes checking for PAM support... no checking PLAIN... disabled checking ANONYMOUS... disabled checking LOGIN... disabled configure: WARNING: OpenSSL not found -- NTLM will be disabled checking NTLM... disabled configure: WARNING: OpenSSL not found -- PASSDSS will be disabled checking PASSDSS... disabled checking to include LDAP support... no checking SQL... disabled checking LDAPDB... disabled checking for dmalloc library... no checking for sfio library... no checking for getsubopt... yes checking for snprintf... yes checking for vsnprintf... yes checking for inet_aton in -lresolv... yes checking for getaddrinfo... no checking for getaddrinfo in -lsocket... yes checking for gai_strerror... yes checking for getnameinfo... yes checking for an ANSI C-conforming const... yes checking for inline... inline checking for mode_t... yes checking for pid_t... yes checking for sys/time.h... yes checking for dirent.h that defines DIR... yes checking for library containing opendir... none required checking for sys/wait.h that is POSIX.1 compatible... yes checking crypt.h usability... yes checking crypt.h presence... yes checking for crypt.h... yes checking des.h usability... no checking des.h presence... no checking for des.h... no checking for dlfcn.h... (cached) yes checking fcntl.h usability... yes checking fcntl.h presence... yes checking for fcntl.h... yes checking limits.h usability... yes checking limits.h presence... yes checking for limits.h... yes checking malloc.h usability... yes checking malloc.h presence... yes checking for malloc.h... yes checking paths.h usability... yes checking paths.h presence... yes checking for paths.h... yes checking for strings.h... (cached) yes checking sys/file.h usability... yes checking sys/file.h presence... yes checking for sys/file.h... yes checking for sys/time.h... (cached) yes checking syslog.h usability... yes checking syslog.h presence... yes checking for syslog.h... yes checking for unistd.h... (cached) yes checking for inttypes.h... (cached) yes checking sys/uio.h usability... yes checking sys/uio.h presence... yes checking for sys/uio.h... yes checking sys/param.h usability... yes checking sys/param.h presence... yes checking for sys/param.h... yes checking sysexits.h usability... yes checking sysexits.h presence... yes checking for sysexits.h... yes checking stdarg.h usability... yes checking stdarg.h presence... yes checking for stdarg.h... yes checking varargs.h usability... no checking varargs.h presence... no checking for varargs.h... no checking krb5.h usability... no checking krb5.h presence... no checking for krb5.h... no checking whether you have ss_family in struct sockaddr_storage... yes checking whether you have sa_len in struct sockaddr... no checking for socklen_t... yes checking for gethostname... yes checking for getdomainname... no checking for getpwnam... yes checking for getspnam... yes checking for gettimeofday... yes checking for inet_aton... yes checking for memcpy... yes checking for memmem... yes checking for mkdir... yes checking for select... yes checking for socket... (cached) no checking for strchr... yes checking for strdup... yes checking for strerror... yes checking for strspn... yes checking for strstr... yes checking for strtol... yes checking for jrand48... yes checking for getpassphrase... yes checking for asprintf... yes checking for strlcat... yes checking for strlcpy... yes checking if getpwnam_r/getspnam_r take 5 arguments... yes checking for sphinx-build... no configure: WARNING: No sphinx-build, won't be able to regenerate docs checking for perl... perl checking for perl module Pod::POM::View::Restructured... no configure: WARNING: No Pod::POM::View::Restructured, won't be able to regenerate docs configure: updating cache ./config.cache checking that generated files are newer than configure... done configure: creating ./config.status config.status: creating Makefile config.status: creating libsasl2.pc config.status: creating include/Makefile config.status: creating saslauthd/Makefile config.status: creating sasldb/Makefile config.status: creating common/Makefile config.status: creating plugins/Makefile config.status: creating lib/Makefile config.status: creating utils/Makefile config.status: creating sample/Makefile config.status: creating pwcheck/Makefile config.status: creating config.h config.status: executing depfiles commands config.status: executing libtool commands rm: libtoolT: No such file or directory configure: WARNING: unrecognized options: --disable-java configure: cyrus-sasl - 2.1.28 • Prefix: /opt/pkg • Plugins: libsasldb.la Now type 'make' to build cyrus-sasl => Modifying libtool scripts to use pkgsrc libtool => Modifying libtool scripts to use pkgsrc depcomp