security/openvpn build failure on 12-CURRENT/amd64

[Shawn Webb]

Hey All,

It looks like security/openvpn fails to build on 12-CURRENT/amd64 on
both FreeBSD's and HardenedBSD's build infrastructure. I've verified
that it builds fine on latest 11-STABLE/amd64. Would this be a
regression in 12-CURRENT?

Log file from FreeBSD's build:
http://beefy4.nyi.freebsd.org/data/head-amd64-default/p419204_s303419/logs/errors/openvpn-2.3.11.log

Thanks,

[Shawn Webb]

Hi Shawn,
!!! Jail is newer than host. (Jail: 1200001, Host: 1100116) !!!
!!! This is not supported. !!!
!!! Host kernel must be same or newer than jail. !!!
!!! Expect build failures. !!!
I wish the builders would stop even trying to build a package on a kernel that is too old, it's just confusing and wasteful.

Hey Matthias,

HardenedBSD's kernel and world matched and still had the very same
build error.

Here's the build log: http://pastebin.com/TEBih1Sx

Thanks,

[Matthias Andree]

Hi Shawn,

The compilation attempt was done on an invalid configuration and has zero relevance whatsoever. As the log says:

!!! Jail is newer than host. (Jail: 1200001, Host: 1100116) !!!
!!! This is not supported. !!!
!!! Host kernel must be same or newer than jail. !!!
!!! Expect build failures. !!!

I wish the builders would stop even trying to build a package on a kernel that is too old, it's just confusing and wasteful.

Post by Shawn Webb
Hey All,
It looks like security/openvpn fails to build on 12-CURRENT/amd64 on
both FreeBSD's and HardenedBSD's build infrastructure. I've verified
that it builds fine on latest 11-STABLE/amd64. Would this be a
regression in 12-CURRENT?
http://beefy4.nyi.freebsd.org/data/head-amd64-default/p419204_s303419/logs/errors/openvpn-2.3.11.log
Thanks,
--
Shawn Webb
Cofounder and Security Engineer
HardenedBSD
GPG Key ID: 0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE

[Ngie Cooper]

On Mon, Aug 1, 2016 at 7:31 AM, Shawn Webb <***@hardenedbsd.org> wrote:

...

Post by Shawn Webb
HardenedBSD's kernel and world matched and still had the very same
build error.
Here's the build log: http://pastebin.com/TEBih1Sx

Confirmed -- why's it looking for tcp6local/udp6local though (this
isn't a valid protocol, and for some odd reason it's being picked up
from the sample config file..?)? Looks like a port bug...
Thanks,
-Ngie

$ sudo make -C /usr/ports/security/openvpn build
...
PASS: t_lpback.sh
The following test will take about two minutes.
If the addresses are in use, this test will retry up to two times.
Options error: Bad protocol: 'udp6local'. Allowed protocols with
--proto option: [proto-uninitialized] [udp] [tcp-server] [tcp-client]
[tcp] [udp6] [tcp6-server] [tcp6-client] [tcp6]
Use --help for more information.
Options error: Bad protocol: 'udp6local'. Allowed protocols with
--proto option: [proto-uninitialized] [udp] [tcp-server] [tcp-client]
[tcp] [udp6] [tcp6-server] [tcp6-client] [tcp6]
Use --help for more information.
FAIL: t_cltsrv.sh
====================================================
1 of 2 tests failed
(1 test was not run)
Please report to openvpn-***@lists.sourceforge.net
====================================================
*** [check-TESTS] Error code 1
$ grep -r udp6local work/
work/openvpn-2.3.11/sample/sample-config-files/loopback-client.test:proto
udp6local ::1
work/openvpn-2.3.11/sample/sample-config-files/loopback-server.test:proto
udp6local ::1

[Michael Butler]

Post by Ngie Cooper

Post by Shawn Webb
HardenedBSD's kernel and world matched and still had the very same
build error.
Here's the build log: http://pastebin.com/TEBih1Sx

Confirmed -- why's it looking for tcp6local/udp6local though (this
isn't a valid protocol, and for some odd reason it's being picked up
from the sample config file..?)? Looks like a port bug...
Thanks,
-Ngie

Built just fine for me today on AMD64 "FreeBSD 12.0-CURRENT #165
r303601: Sun Jul 31 20:34:50 EDT 2016",

imb

[Matthias Andree]

Hi Ngie,

Quite possibly an incompatibility between the port or the upstream software build/self-test rigging with the rather new FreeBSD 12-CURRENT. Since I do not have the latter, I am soliciting patches (through Bugzilla).

I am staring at <http://svnweb.freebsd.org/ports/head/security/openvpn/files/patch-tests__t_cltsrv.sh?revision=385432&view=markup#l39> ff. and it does not make sense to me that or why it is failing. I am wondering if it is something specific to 12-CURRENT that does additional patching, or if sed(1) behaves in a different way. Insights welcome.

Cheers,
Matthias

Post by Ngie Cooper
...

Post by Shawn Webb
HardenedBSD's kernel and world matched and still had the very same
build error.
Here's the build log: http://pastebin.com/TEBih1Sx

Confirmed -- why's it looking for tcp6local/udp6local though (this
isn't a valid protocol, and for some odd reason it's being picked up
from the sample config file..?)? Looks like a port bug...
Thanks,
-Ngie
$ sudo make -C /usr/ports/security/openvpn build
...
PASS: t_lpback.sh
The following test will take about two minutes.
If the addresses are in use, this test will retry up to two times.
Options error: Bad protocol: 'udp6local'. Allowed protocols with
--proto option: [proto-uninitialized] [udp] [tcp-server] [tcp-client]
[tcp] [udp6] [tcp6-server] [tcp6-client] [tcp6]
Use --help for more information.
Options error: Bad protocol: 'udp6local'. Allowed protocols with
--proto option: [proto-uninitialized] [udp] [tcp-server] [tcp-client]
[tcp] [udp6] [tcp6-server] [tcp6-client] [tcp6]
Use --help for more information.
FAIL: t_cltsrv.sh
====================================================
1 of 2 tests failed
(1 test was not run)
====================================================
*** [check-TESTS] Error code 1
$ grep -r udp6local work/
work/openvpn-2.3.11/sample/sample-config-files/loopback-client.test:proto
udp6local ::1
work/openvpn-2.3.11/sample/sample-config-files/loopback-server.test:proto
udp6local ::1