Opened 7 years ago

Closed 5 years ago

#56399 closed defect (fixed)

openssh @7.6p1_4 +ldns: Install fails at openssh configure stage when libressl is installed

Reported by: leebast (Lee Bast) Owned by: janstary (Jan Starý)
Priority: Normal Milestone:
Component: ports Version: 2.4.3
Keywords: Cc: Ionic (Mihai Moldovan)
Port: openssh

Description (last modified by mf2k (Frank Schima))

May be High Sierra specific, but I only have one 10.12 system and no 10.11 or 10.10 systems remaining to verify with. Reproduced on rMBP and Mac Pro 5,1 running macOS 10.13.4, Xcode 9.3 with all software updates applied. With a completely fresh install of MacPorts build fails at the openssh configuration step. However, the build succeeded on a system running 10.12.6.

Steps to reproduce:

  1. New install of MacPorts, selfupdate.
  2. port install libressl
  3. port install openssh +ldns

All dependencies install. Build halts at

--->  Configuring openssh
Error: Failed to configure openssh, consult /opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openssh/openssh/work/openssh-7.6p1/config.log
Error: Failed to configure openssh: configure failure: command execution failed

OpenSSH does install successfully with libressl installed but without the ldns variant, or without libressl installed and with the ldns variant.

Attachments (3)

main.log (81.1 KB) - added by leebast (Lee Bast) 7 years ago.
config.log.zip (30.1 KB) - added by leebast (Lee Bast) 7 years ago.
ssh.log (432.0 KB) - added by janstary (Jan Starý) 7 years ago.
openssh -xauth -kerberos5 +ldns with libressl-devel

Download all attachments as: .zip

Change History (20)

Changed 7 years ago by leebast (Lee Bast)

Attachment: main.log added

Changed 7 years ago by leebast (Lee Bast)

Attachment: config.log.zip added

comment:1 Changed 7 years ago by mf2k (Frank Schima)

Port: openssh added

In the future, please fill in the Port field.

comment:2 Changed 7 years ago by mf2k (Frank Schima)

Description: modified (diff)

comment:3 Changed 7 years ago by mf2k (Frank Schima)

Last edited 7 years ago by mf2k (Frank Schima) (previous) (diff)

comment:4 Changed 7 years ago by pmetzger (Perry E. Metzger)

Owner: set to janstary
Status: newassigned

Assigning to janstary on the basis that he's the person who seems to be most interested in libressl at the moment.

comment:5 in reply to:  1 Changed 7 years ago by leebast (Lee Bast)

Replying to mf2k:

In the future, please fill in the Port field.

Will do. I'm not sure how I missed that beyond it being the end of a long day, my apologies.

comment:6 Changed 7 years ago by janstary (Jan Starý)

The libressl port installs LibreSSL 2.5.5, which is a couple of releases ago. Please try the same with libessl-devel, which is currently 2.7.2.

comment:7 Changed 7 years ago by janstary (Jan Starý)

On MacOS 10.13.4 with libressl-devel installed (2.7.2), sudo port -vs build openssh -xauth -kerberos5 +ldns builds fine.

comment:8 Changed 7 years ago by janstary (Jan Starý)

The offending line from your main.log becomes

checking OpenSSL header version... 20000000 (LibreSSL 2.7.2)
checking OpenSSL library version... 20000000 (LibreSSL 2.7.2)

Changed 7 years ago by janstary (Jan Starý)

Attachment: ssh.log added

openssh -xauth -kerberos5 +ldns with libressl-devel

comment:9 Changed 7 years ago by pmetzger (Perry E. Metzger)

janstary: if the port requires the -devel version, then shouldn't it be made to depend on it, at least for now?

comment:10 Changed 7 years ago by danielluke (Daniel J. Luke)

it currently doesn't depend on libressl at all. We should probably change it from path:lib/libssl.dylib:openssl to port:openssl for now. Ideally, we fix libressl & openssl so they can both be installed at the same time and then have ports depend on one or the other (possibly with variants).

comment:11 Changed 7 years ago by raimue (Rainer Müller)

Installing openssl and libressl side-by-side is already being tracked in #54744.

comment:12 Changed 7 years ago by janstary (Jan Starý)

Perry: both OpenSSH and LibreSSL are OpenBSD projects; of course OpenSSH works with LibreSSL, they are both parts of OpenBSD base install. Understandably, OpenSSH requires a decently recent version of LibreSSL - but we have 2.5.5 in the libressl port. The current relese of LibreSSL is 2.7.3; we have 2.7.2 in the libressl-devel port. So it's not like OpenSSH "requires" libressl-devel, it's that our libressl port is so behind.

Last edited 7 years ago by janstary (Jan Starý) (previous) (diff)

comment:13 Changed 7 years ago by janstary (Jan Starý)

Daniel: no, we should not change path:lib/libssl.dylib:openssl to port:openssl. That would make it _require_ openssl, while OpenSSH does not require OpenSSL at all. Which would make it impossible for people with libressl* installed to install the openssh port.

comment:14 Changed 7 years ago by pmetzger (Perry E. Metzger)

Now that a more up to date LibreSSL-devel is in, what's the status on this?

comment:15 Changed 7 years ago by janstary (Jan Starý)

With LibreSSL 2.7.3 installed via libressl-devel, the current openssh port builds fine on MacOS 10.13.4

comment:16 Changed 6 years ago by janstary (Jan Starý)

I don't now what else is supposed to happen with this. With the current LibreSSL, as intalled by libressl-devel, it works just fine. With the outdated LibreSSL present in the libressl port, it doesn't. We need to update the libressl port.

comment:17 Changed 5 years ago by Ionic (Mihai Moldovan)

Cc: Ionic added
Resolution: fixed
Status: assignedclosed

libressl port is at 2.8.3, assuming this issue is fixed.

Note: See TracTickets for help on using tickets.