net/relayd: fix build

While here, pet linters.

PR:	262004
Reported by:	swills@FreeBSD.org
Approved by:	koue@chaosophia.net (maintainer)
MFH:	2022Q1	build fix
This commit is contained in:
Steve Wills
2022-02-25 14:19:12 +01:00
committed by Fernando Apesteguía
parent d76542d712
commit b4d94c7c3d
4 changed files with 47 additions and 6 deletions

View File

@@ -8,23 +8,23 @@ COMMENT= OpenBSD relay daemon
LICENSE= ISCL
GH_ACCOUNT= mmatuska
USES= ssl uidfix
USE_GITHUB= yes
GH_ACCOUNT= mmatuska
USE_RC_SUBR= relayd
WRKSRC_SUBDIR= src/usr.sbin
MAKE_ARGS+= BINDIR=${PREFIX}/sbin \
MANDIR=${PREFIX}/man/man
CFLAGS+= -Wall
MAKE_ARGS+= BINDIR=${PREFIX}/sbin \
MANDIR=${PREFIX}/man/man
WRKSRC_SUBDIR= src/usr.sbin
USERS= _relayd
GROUPS= _relayd
post-install:
@${INSTALL_DATA} ${WRKSRC}/../etc/relayd.conf \
${INSTALL_DATA} ${WRKSRC}/../etc/relayd.conf \
${STAGEDIR}${PREFIX}/etc/relayd.conf.sample
.include <bsd.port.pre.mk>

View File

@@ -0,0 +1,12 @@
--- relayd/Makefile.orig 2014-08-10 20:08:47 UTC
+++ relayd/Makefile
@@ -28,8 +28,7 @@ SRCS+= parse.y \
relay_udp.c \
relayd.c \
shuffle.c \
- ssl.c \
- ssl_privsep.c
+ ssl.c
.PATH: ${.CURDIR}/../../../libevent
SRCS+= buffer.c \

View File

@@ -1,5 +1,23 @@
--- relayd/relay.c.orig 2014-08-10 20:08:47 UTC
+++ relayd/relay.c
@@ -2097,7 +2097,7 @@ relay_ssl_ctx_create(struct relay *rlay)
/* Verify the server certificate if we have a CA chain */
if ((rlay->rl_conf.flags & F_SSLCLIENT) &&
(rlay->rl_ssl_ca != NULL)) {
- if (!ssl_ctx_load_verify_memory(ctx,
+ if (!SSL_CTX_load_verify_mem(ctx,
rlay->rl_ssl_ca, rlay->rl_conf.ssl_ca_len))
goto err;
SSL_CTX_set_verify(ctx, SSL_VERIFY_PEER, NULL);
@@ -2107,7 +2107,7 @@ relay_ssl_ctx_create(struct relay *rlay)
return (ctx);
log_debug("%s: loading certificate", __func__);
- if (!ssl_ctx_use_certificate_chain(ctx,
+ if (!SSL_CTX_use_certificate_chain_mem(ctx,
rlay->rl_ssl_cert, rlay->rl_conf.ssl_cert_len))
goto err;
@@ -2716,12 +2716,12 @@ relay_load_certfiles(struct relay *rlay)
return (-1);

View File

@@ -49,3 +49,14 @@
/* Attach the control socket to the following process */
#define PROC_CONTROL PROC_PFE
@@ -1242,10 +1252,6 @@ int ssl_load_pkey(const void *, size_t, char *, off_t
X509 **, EVP_PKEY **);
int ssl_ctx_fake_private_key(SSL_CTX *, const void *, size_t,
char *, off_t, X509 **, EVP_PKEY **);
-
-/* ssl_privsep.c */
-int ssl_ctx_use_certificate_chain(SSL_CTX *, char *, off_t);
-int ssl_ctx_load_verify_memory(SSL_CTX *, char *, off_t);
/* ca.c */
pid_t ca(struct privsep *, struct privsep_proc *);