NetBSD Problem Report #59594
From www@netbsd.org Wed Aug 13 17:09:13 2025
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits)
client-signature RSA-PSS (2048 bits))
(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
by mollari.NetBSD.org (Postfix) with ESMTPS id DEF9E1A923A
for <gnats-bugs@gnats.NetBSD.org>; Wed, 13 Aug 2025 17:09:13 +0000 (UTC)
Message-Id: <20250813170911.AB0EA1A923C@mollari.NetBSD.org>
Date: Wed, 13 Aug 2025 17:09:11 +0000 (UTC)
From: rwhitlock22@gmail.com
Reply-To: rwhitlock22@gmail.com
To: gnats-bugs@NetBSD.org
Subject: SSL checkflist build errors
X-Send-Pr-Version: www-1.0
>Number: 59594
>Category: misc
>Synopsis: SSL checkflist build errors
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: misc-bug-people
>State: open
>Class: sw-bug
>Submitter-Id: net
>Arrival-Date: Wed Aug 13 17:10:00 +0000 2025
>Last-Modified: Fri Aug 29 16:15:01 +0000 2025
>Originator: Robert Whitlock
>Release: NetBSD current, Aug 13, 2025
>Organization:
>Environment:
11.99.1 kernel on 10.99.something userland, amd64
>Description:
Building the NetBSD userland fails with checkflist errors, likely due to some OpenSSL update.
checkflist ===> distrib/sets
# execute checkflist
cd /usr/netbsd/current/src/distrib/sets && DESTDIR=/usr/netbsd/current/build/THINKPAD/destdir.amd64 MACHINE=amd64 MACHINE_ARCH=x86_64 AWK=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbawk CKSUM=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbcksum DB=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbdb EGREP=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbgrep\ -E HOST_SH=/bin/sh MAKE=make MKTEMP=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbmktemp MTREE=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbmtree PAX=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbpax COMPRESS_PROGRAM=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbxz GZIP=-n XZ_OPT=-9 TAR_SUFF=tar.xz PKG_CREATE=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbpkg_create SED=/usr/netbsd/current/build/THINKPAD/
tooldir.NetBSD-11.99.1-amd64/bin/nbsed TSORT=/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64/bin/nbtsort\ -q /bin/sh /usr/netbsd/current/src/distrib/sets/checkflist -L base,x
======= 225 extra files in DESTDIR =========
Files in DESTDIR but missing from flist.
File is obsolete or flist is out of date ?
------------------------------------------
./lib/libcrypto.so.16
./lib/libcrypto.so.16.0
./usr/include/openssl/e_ostime.h
./usr/include/openssl/indicator.h
./usr/include/openssl/quic.h
./usr/include/openssl/x509_acert.h
./usr/lib/i386/libcrypto.so.16
./usr/lib/i386/libcrypto.so.16.0
./usr/lib/i386/libdes.so.16
./usr/lib/i386/libdes.so.16.0
./usr/lib/i386/libssl.so.16
./usr/lib/i386/libssl.so.16.0
./usr/lib/libcrypto.so.16
./usr/lib/libcrypto.so.16.0
./usr/lib/libdes.so.16
./usr/lib/libdes.so.16.0
./usr/lib/libssl.so.16
./usr/lib/libssl.so.16.0
./usr/libdata/debug/lib/libcrypto.so.16.0.debug
./usr/libdata/debug/usr/lib/i386/libcrypto.so.16.0.debug
./usr/libdata/debug/usr/lib/i386/libdes.so.16.0.debug
./usr/libdata/debug/usr/lib/i386/libssl.so.16.0.debug
./usr/libdata/debug/usr/lib/libcrypto.so.16.0.debug
./usr/libdata/debug/usr/lib/libdes.so.16.0.debug
./usr/libdata/debug/usr/lib/libssl.so.16.0.debug
./usr/share/man/html1/openssl-skeyutl.html
./usr/share/man/html3/BIO_get_rpoll_descriptor.html
./usr/share/man/html3/BIO_s_dgram_pair.html
./usr/share/man/html3/BIO_sendmmsg.html
./usr/share/man/html3/CMAC_CTX.html
./usr/share/man/html3/COMP_CTX_new.html
./usr/share/man/html3/DTLSv1_get_timeout.html
./usr/share/man/html3/DTLSv1_handle_timeout.html
./usr/share/man/html3/EVP_PKEY_CTX_get_algor.html
./usr/share/man/html3/EVP_SKEY.html
./usr/share/man/html3/EVP_SKEYMGMT.html
./usr/share/man/html3/GENERAL_NAME.html
./usr/share/man/html3/OPENSSL_load_u16_le.html
./usr/share/man/html3/OPENSSL_riscvcap.html
./usr/share/man/html3/OSSL_CMP_ATAV_set0.html
./usr/share/man/html3/OSSL_CMP_ITAV_new_caCerts.html
./usr/share/man/html3/OSSL_ERR_STATE_save.html
./usr/share/man/html3/OSSL_GENERAL_NAMES_print.html
./usr/share/man/html3/OSSL_HPKE_CTX_new.html
./usr/share/man/html3/OSSL_IETF_ATTR_SYNTAX.html
./usr/share/man/html3/OSSL_IETF_ATTR_SYNTAX_print.html
./usr/share/man/html3/OSSL_INDICATOR_set_callback.html
./usr/share/man/html3/OSSL_LIB_CTX_set_conf_diagnostics.html
./usr/share/man/html3/OSSL_PARAM_print_to_bio.html
./usr/share/man/html3/OSSL_QUIC_client_method.html
./usr/share/man/html3/OSSL_sleep.html
./usr/share/man/html3/PBMAC1_get1_pbkdf2_param.html
./usr/share/man/html3/PKCS12_SAFEBAG_set0_attrs.html
./usr/share/man/html3/SSL_CTX_set1_cert_comp_preference.html
./usr/share/man/html3/SSL_CTX_set_domain_flags.html
./usr/share/man/html3/SSL_CTX_set_new_pending_conn_cb.html
./usr/share/man/html3/SSL_accept_stream.html
./usr/share/man/html3/SSL_get0_connection.html
./usr/share/man/html3/SSL_get0_group_name.html
./usr/share/man/html3/SSL_get0_peer_rpk.html
./usr/share/man/html3/SSL_get1_builtin_sigalgs.html
./usr/share/man/html3/SSL_get_conn_close_info.html
./usr/share/man/html3/SSL_get_event_timeout.html
./usr/share/man/html3/SSL_get_handshake_rtt.html
./usr/share/man/html3/SSL_get_rpoll_descriptor.html
./usr/share/man/html3/SSL_get_stream_id.html
./usr/share/man/html3/SSL_get_stream_read_state.html
./usr/share/man/html3/SSL_get_value_uint.html
./usr/share/man/html3/SSL_handle_events.html
./usr/share/man/html3/SSL_inject_net_dgram.html
./usr/share/man/html3/SSL_new_domain.html
./usr/share/man/html3/SSL_new_listener.html
./usr/share/man/html3/SSL_new_stream.html
./usr/share/man/html3/SSL_poll.html
./usr/share/man/html3/SSL_set1_initial_peer_addr.html
./usr/share/man/html3/SSL_set1_server_cert_type.html
./usr/share/man/html3/SSL_set_blocking_mode.html
./usr/share/man/html3/SSL_set_default_stream_mode.html
./usr/share/man/html3/SSL_set_incoming_stream_policy.html
./usr/share/man/html3/SSL_set_quic_tls_cbs.html
./usr/share/man/html3/SSL_set_session_secret_cb.html
./usr/share/man/html3/SSL_stream_conclude.html
./usr/share/man/html3/SSL_stream_reset.html
./usr/share/man/html3/TS_VERIFY_CTX.html
./usr/share/man/html3/X509_ACERT_add1_attr.html
./usr/share/man/html3/X509_ACERT_add_attr_nconf.html
./usr/share/man/html3/X509_ACERT_get0_holder_baseCertId.html
./usr/share/man/html3/X509_ACERT_get_attr.html
./usr/share/man/html3/X509_ACERT_print_ex.html
./usr/share/man/html3/X509_STORE_CTX_get_by_subject.html
./usr/share/man/html3/X509_get_default_cert_file.html
./usr/share/man/html7/EVP_KDF-ARGON2.html
./usr/share/man/html7/EVP_KDF-HMAC-DRBG.html
./usr/share/man/html7/EVP_KDF-PVKKDF.html
./usr/share/man/html7/EVP_KEM-EC.html
./usr/share/man/html7/EVP_KEM-ML-KEM.html
./usr/share/man/html7/EVP_KEM-X25519.html
./usr/share/man/html7/EVP_MD-KECCAK.html
./usr/share/man/html7/EVP_PKEY-ML-DSA.html
./usr/share/man/html7/EVP_PKEY-ML-KEM.html
./usr/share/man/html7/EVP_PKEY-SLH-DSA.html
./usr/share/man/html7/EVP_RAND-CRNG-TEST.html
./usr/share/man/html7/EVP_RAND-JITTER.html
./usr/share/man/html7/EVP_SIGNATURE-ML-DSA.html
./usr/share/man/html7/EVP_SIGNATURE-SLH-DSA.html
./usr/share/man/html7/OSSL_STORE-winstore.html
./usr/share/man/html7/openssl-qlog.html
./usr/share/man/html7/openssl-quic-concurrency.html
./usr/share/man/html7/openssl-quic.html
./usr/share/man/html7/ossl-guide-introduction.html
./usr/share/man/html7/ossl-guide-libcrypto-introduction.html
./usr/share/man/html7/ossl-guide-libraries-introduction.html
./usr/share/man/html7/ossl-guide-libssl-introduction.html
./usr/share/man/html7/ossl-guide-migration.html
./usr/share/man/html7/ossl-guide-quic-client-block.html
./usr/share/man/html7/ossl-guide-quic-client-non-block.html
./usr/share/man/html7/ossl-guide-quic-introduction.html
./usr/share/man/html7/ossl-guide-quic-multi-stream.html
./usr/share/man/html7/ossl-guide-quic-server-block.html
./usr/share/man/html7/ossl-guide-quic-server-non-block.html
./usr/share/man/html7/ossl-guide-tls-client-block.html
./usr/share/man/html7/ossl-guide-tls-client-non-block.html
./usr/share/man/html7/ossl-guide-tls-introduction.html
./usr/share/man/html7/ossl-guide-tls-server-block.html
./usr/share/man/html7/provider-skeymgmt.html
./usr/share/man/man1/openssl-skeyutl.1
./usr/share/man/man3/BIO_get_rpoll_descriptor.3
./usr/share/man/man3/BIO_s_dgram_pair.3
./usr/share/man/man3/BIO_sendmmsg.3
./usr/share/man/man3/CMAC_CTX.3
./usr/share/man/man3/COMP_CTX_new.3
./usr/share/man/man3/DTLSv1_get_timeout.3
./usr/share/man/man3/DTLSv1_handle_timeout.3
./usr/share/man/man3/EVP_PKEY_CTX_get_algor.3
./usr/share/man/man3/EVP_SKEY.3
./usr/share/man/man3/EVP_SKEYMGMT.3
./usr/share/man/man3/GENERAL_NAME.3
./usr/share/man/man3/OPENSSL_load_u16_le.3
./usr/share/man/man3/OPENSSL_riscvcap.3
./usr/share/man/man3/OSSL_CMP_ATAV_set0.3
./usr/share/man/man3/OSSL_CMP_ITAV_new_caCerts.3
./usr/share/man/man3/OSSL_ERR_STATE_save.3
./usr/share/man/man3/OSSL_GENERAL_NAMES_print.3
./usr/share/man/man3/OSSL_HPKE_CTX_new.3
./usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX.3
./usr/share/man/man3/OSSL_IETF_ATTR_SYNTAX_print.3
./usr/share/man/man3/OSSL_INDICATOR_set_callback.3
./usr/share/man/man3/OSSL_LIB_CTX_set_conf_diagnostics.3
./usr/share/man/man3/OSSL_PARAM_print_to_bio.3
./usr/share/man/man3/OSSL_QUIC_client_method.3
./usr/share/man/man3/OSSL_sleep.3
./usr/share/man/man3/PBMAC1_get1_pbkdf2_param.3
./usr/share/man/man3/PKCS12_SAFEBAG_set0_attrs.3
./usr/share/man/man3/SSL_CTX_set1_cert_comp_preference.3
./usr/share/man/man3/SSL_CTX_set_domain_flags.3
./usr/share/man/man3/SSL_CTX_set_new_pending_conn_cb.3
./usr/share/man/man3/SSL_accept_stream.3
./usr/share/man/man3/SSL_get0_connection.3
./usr/share/man/man3/SSL_get0_group_name.3
./usr/share/man/man3/SSL_get0_peer_rpk.3
./usr/share/man/man3/SSL_get1_builtin_sigalgs.3
./usr/share/man/man3/SSL_get_conn_close_info.3
./usr/share/man/man3/SSL_get_event_timeout.3
./usr/share/man/man3/SSL_get_handshake_rtt.3
./usr/share/man/man3/SSL_get_rpoll_descriptor.3
./usr/share/man/man3/SSL_get_stream_id.3
./usr/share/man/man3/SSL_get_stream_read_state.3
./usr/share/man/man3/SSL_get_value_uint.3
./usr/share/man/man3/SSL_handle_events.3
./usr/share/man/man3/SSL_inject_net_dgram.3
./usr/share/man/man3/SSL_new_domain.3
./usr/share/man/man3/SSL_new_listener.3
./usr/share/man/man3/SSL_new_stream.3
./usr/share/man/man3/SSL_poll.3
./usr/share/man/man3/SSL_set1_initial_peer_addr.3
./usr/share/man/man3/SSL_set1_server_cert_type.3
./usr/share/man/man3/SSL_set_blocking_mode.3
./usr/share/man/man3/SSL_set_default_stream_mode.3
./usr/share/man/man3/SSL_set_incoming_stream_policy.3
./usr/share/man/man3/SSL_set_quic_tls_cbs.3
./usr/share/man/man3/SSL_set_session_secret_cb.3
./usr/share/man/man3/SSL_stream_conclude.3
./usr/share/man/man3/SSL_stream_reset.3
./usr/share/man/man3/TS_VERIFY_CTX.3
./usr/share/man/man3/X509_ACERT_add1_attr.3
./usr/share/man/man3/X509_ACERT_add_attr_nconf.3
./usr/share/man/man3/X509_ACERT_get0_holder_baseCertId.3
./usr/share/man/man3/X509_ACERT_get_attr.3
./usr/share/man/man3/X509_ACERT_print_ex.3
./usr/share/man/man3/X509_STORE_CTX_get_by_subject.3
./usr/share/man/man3/X509_get_default_cert_file.3
./usr/share/man/man7/EVP_KDF-ARGON2.7
./usr/share/man/man7/EVP_KDF-HMAC-DRBG.7
./usr/share/man/man7/EVP_KDF-PVKKDF.7
./usr/share/man/man7/EVP_KEM-EC.7
./usr/share/man/man7/EVP_KEM-ML-KEM.7
./usr/share/man/man7/EVP_KEM-X25519.7
./usr/share/man/man7/EVP_MD-KECCAK.7
./usr/share/man/man7/EVP_PKEY-ML-DSA.7
./usr/share/man/man7/EVP_PKEY-ML-KEM.7
./usr/share/man/man7/EVP_PKEY-SLH-DSA.7
./usr/share/man/man7/EVP_RAND-CRNG-TEST.7
./usr/share/man/man7/EVP_RAND-JITTER.7
./usr/share/man/man7/EVP_SIGNATURE-ML-DSA.7
./usr/share/man/man7/EVP_SIGNATURE-SLH-DSA.7
./usr/share/man/man7/OSSL_STORE-winstore.7
./usr/share/man/man7/openssl-qlog.7
./usr/share/man/man7/openssl-quic-concurrency.7
./usr/share/man/man7/openssl-quic.7
./usr/share/man/man7/ossl-guide-introduction.7
./usr/share/man/man7/ossl-guide-libcrypto-introduction.7
./usr/share/man/man7/ossl-guide-libraries-introduction.7
./usr/share/man/man7/ossl-guide-libssl-introduction.7
./usr/share/man/man7/ossl-guide-migration.7
./usr/share/man/man7/ossl-guide-quic-client-block.7
./usr/share/man/man7/ossl-guide-quic-client-non-block.7
./usr/share/man/man7/ossl-guide-quic-introduction.7
./usr/share/man/man7/ossl-guide-quic-multi-stream.7
./usr/share/man/man7/ossl-guide-quic-server-block.7
./usr/share/man/man7/ossl-guide-quic-server-non-block.7
./usr/share/man/man7/ossl-guide-tls-client-block.7
./usr/share/man/man7/ossl-guide-tls-client-non-block.7
./usr/share/man/man7/ossl-guide-tls-introduction.7
./usr/share/man/man7/ossl-guide-tls-server-block.7
./usr/share/man/man7/provider-skeymgmt.7
========= end of 225 extra files ===========
====== 84 missing files in DESTDIR ========
Files in flist but missing from DESTDIR.
File wasn't installed ?
------------------------------------------
./lib/libcrypto.so.15
./lib/libcrypto.so.15.0
./usr/include/openssl/asn1_mac.h
./usr/lib/i386/libcrypto.so.15
./usr/lib/i386/libcrypto.so.15.0
./usr/lib/i386/libdes.so.15
./usr/lib/i386/libdes.so.15.0
./usr/lib/i386/libssl.so.15
./usr/lib/i386/libssl.so.15.0
./usr/lib/libcrypto.so.15
./usr/lib/libcrypto.so.15.0
./usr/lib/libdes.so.15
./usr/lib/libdes.so.15.0
./usr/lib/libssl.so.15
./usr/lib/libssl.so.15.0
./usr/libdata/debug/lib/libcrypto.so.15.0.debug
./usr/libdata/debug/usr/lib/i386/libcrypto.so.15.0.debug
./usr/libdata/debug/usr/lib/i386/libdes.so.15.0.debug
./usr/libdata/debug/usr/lib/i386/libssl.so.15.0.debug
./usr/libdata/debug/usr/lib/libcrypto.so.15.0.debug
./usr/libdata/debug/usr/lib/libdes.so.15.0.debug
./usr/libdata/debug/usr/lib/libssl.so.15.0.debug
./usr/share/man/html3/EVP_PKEY_cmp.html
./usr/share/man/html3/EVP_aes.html
./usr/share/man/html3/EVP_aria.html
./usr/share/man/html3/EVP_camellia.html
./usr/share/man/html3/EVP_des.html
./usr/share/man/html3/OPENSSL_VERSION_NUMBER.html
./usr/share/man/html3/RAND_DRBG_generate.html
./usr/share/man/html3/RAND_DRBG_get0_master.html
./usr/share/man/html3/RAND_DRBG_new.html
./usr/share/man/html3/RAND_DRBG_reseed.html
./usr/share/man/html3/RAND_DRBG_set_callbacks.html
./usr/share/man/html3/RAND_DRBG_set_ex_data.html
./usr/share/man/html3/SSL_CTX_set_client_CA_list.html
./usr/share/man/html3/SSL_CTX_set_ex_data.html
./usr/share/man/html3/SSL_SESSION_get_ex_data.html
./usr/share/man/html3/SSL_get_client_CA_list.html
./usr/share/man/html3/SSL_get_server_tmp_key.html
./usr/share/man/html3/TS_VERIFY_CTX_set_certs.html
./usr/share/man/html3/d2i_DHparams.html
./usr/share/man/html3/openssl_HMAC.html
./usr/share/man/html3/openssl_MD2.html
./usr/share/man/html3/openssl_MD4.html
./usr/share/man/html3/openssl_MD5.html
./usr/share/man/html5/openssl.cnf.html
./usr/share/man/html7/Ed25519.html
./usr/share/man/html7/RAND_DRBG.html
./usr/share/man/html7/SM2.html
./usr/share/man/html7/crypto.html
./usr/share/man/html7/migration_guide.html
./usr/share/man/html7/scrypt.html
./usr/share/man/html7/ssl.html
./usr/share/man/man3/EVP_PKEY_cmp.3
./usr/share/man/man3/EVP_aes.3
./usr/share/man/man3/EVP_aria.3
./usr/share/man/man3/EVP_camellia.3
./usr/share/man/man3/EVP_des.3
./usr/share/man/man3/OPENSSL_VERSION_NUMBER.3
./usr/share/man/man3/RAND_DRBG_generate.3
./usr/share/man/man3/RAND_DRBG_get0_master.3
./usr/share/man/man3/RAND_DRBG_new.3
./usr/share/man/man3/RAND_DRBG_reseed.3
./usr/share/man/man3/RAND_DRBG_set_callbacks.3
./usr/share/man/man3/RAND_DRBG_set_ex_data.3
./usr/share/man/man3/SSL_CTX_set_client_CA_list.3
./usr/share/man/man3/SSL_CTX_set_ex_data.3
./usr/share/man/man3/SSL_SESSION_get_ex_data.3
./usr/share/man/man3/SSL_get_client_CA_list.3
./usr/share/man/man3/SSL_get_server_tmp_key.3
./usr/share/man/man3/TS_VERIFY_CTX_set_certs.3
./usr/share/man/man3/d2i_DHparams.3
./usr/share/man/man3/openssl_HMAC.3
./usr/share/man/man3/openssl_MD2.3
./usr/share/man/man3/openssl_MD4.3
./usr/share/man/man3/openssl_MD5.3
./usr/share/man/man5/openssl.cnf.5
./usr/share/man/man7/Ed25519.7
./usr/share/man/man7/RAND_DRBG.7
./usr/share/man/man7/SM2.7
./usr/share/man/man7/crypto.7
./usr/share/man/man7/migration_guide.7
./usr/share/man/man7/scrypt.7
./usr/share/man/man7/ssl.7
======== end of 84 missing files ==========
*** Error code 1
Stop.
make[1]: stopped making "checkflist" in /usr/netbsd/current/src/distrib/sets
*** Error code 1
Stop.
make: stopped making "buildworld" in /usr/netbsd/current/src
>How-To-Repeat:
make buildworld
>Fix:
Add and remove files from the file lists.
>Audit-Trail:
From: Martin Husemann <martin@duskware.de>
To: gnats-bugs@netbsd.org
Cc:
Subject: Re: misc/59594: SSL checkflist build errors
Date: Thu, 14 Aug 2025 10:36:48 +0200
The autobuilds all work fine, so the bug is not in the set lists but must
be somewhere in your build environment.
Your build should have produced the newer openssl version (just like the
set lists expect). Do you have some overrides in /etc/mk.conf? Any
modifications in the source tree? How did you invoke build.sh?
Martin
From: Rob Whitlock <rwhitlock22@gmail.com>
To: gnats-bugs@netbsd.org
Cc: misc-bug-people@netbsd.org,
gnats-admin@netbsd.org,
netbsd-bugs@netbsd.org
Subject: Re: misc/59594: SSL checkflist build errors
Date: Thu, 14 Aug 2025 12:44:25 -0400
> On Aug 14, 2025, at 4:40 AM, Martin Husemann via gnats =
<gnats-admin@NetBSD.org> wrote:
>=20
> The following reply was made to PR misc/59594; it has been noted by =
GNATS.
>=20
> From: Martin Husemann <martin@duskware.de>
> To: gnats-bugs@netbsd.org
> Cc:=20
> Subject: Re: misc/59594: SSL checkflist build errors
> Date: Thu, 14 Aug 2025 10:36:48 +0200
>=20
> The autobuilds all work fine, so the bug is not in the set lists but =
must
> be somewhere in your build environment.
>=20
> Your build should have produced the newer openssl version (just like =
the
> set lists expect). Do you have some overrides in /etc/mk.conf? Any=20
> modifications in the source tree? How did you invoke build.sh?
>=20
> Martin
I have the sources in
/usr/netbsd/current/src
and
/usr/netbsd/current/xsrc
and I have
/usr/netbsd/current/build/THINKPAD/envvars.amd64
containing
export MAKECONF=3D/usr/netbsd/current/build/THINKPAD/mk.conf.amd64
export MAKEOBJDIRPREFIX=3D/usr/netbsd/current/build/THINKPAD/obj.amd64
export MACHINE=3Damd64
export MACHINE_ARCH=3Dx86_64
export MAKEFLAGS=3D"-m /usr/netbsd/current/src/share/mk"
and I also have
/usr/netbsd/current/build/THINKPAD/mk.conf.amd64
containing
NETBSDSRCDIR=3D/usr/netbsd/current/src
DESTDIR=3D/usr/netbsd/current/build/THINKPAD/destdir.amd64
RELEASEDIR=3D/usr/netbsd/current/build/THINKPAD/releasedir.amd64
TOOLDIR=3D/usr/netbsd/current/build/THINKPAD/tooldir.NetBSD-11.99.1-amd64
KERNCONFDIR=3D/usr/netbsd/current/build/THINKPAD/kernconf
KERNOBJDIR=3D/usr/netbsd/current/build/THINKPAD/kerncompile
MKDEBUG=3Dyes
MKDEBUGKERNEL=3Dyes
MKDEBUGLIB=3Dyes
MKSTRIPSYM=3Dno
MKX11=3Dyes
X11SRCDIR=3D/usr/netbsd/current/xsrc
USETOOLS=3Dyes
MAKEFLAGS=3D"-m /usr/netbsd/current/src/share/mk"
MKOBJ=3Dyes
#MKOBJDIRS=3Dno
MKOBJDIRS=3Dyes
NOCLEANDIR=3D
MKUPDATE=3Dyes
MKAMDGPUFIRMWARE=3Dno
MKNOUVEAUFIRMWARE=3Dno
MKRADEONFIRMWARE=3Dno
MKTEGRAFIRMWARE=3Dno
#MKLLVM=3Dno
#MKLLVMRT=3Dno
MKZFS=3Dno
MKLDAP=3Dno
and some of the directories like MKOBJDIRPREFIX are created.
Then I initiate the build by running the following commands:
cd usr/netbsd/current/build/THINKPAD
su
. ./envvars.amd64
cd ../../src
make buildworld
although when I run it the first time, I comment out MKUPDATE=3Dyes.=
From: Martin Husemann <martin@duskware.de>
To: Rob Whitlock <rwhitlock22@gmail.com>
Cc: gnats-bugs@netbsd.org
Subject: Re: misc/59594: SSL checkflist build errors
Date: Thu, 14 Aug 2025 19:35:29 +0200
On Thu, Aug 14, 2025 at 12:44:25PM -0400, Rob Whitlock wrote:
> export MAKEFLAGS="-m /usr/netbsd/current/src/share/mk"
This should cause the use of /usr/netbsd/current/src/share/mk/bsd.own.mk
and you should get HAVE_OPENSSL=35, which will cause the right things
to happen.
Can you try:
cd $NETBSDSRCDIR && make -v HAVE_OPENSSL
?
You have a strange setup, usually one would just do a "build.sh tools"
once and then use ${TOOLDIR}/bin/nbmake-amd64 (which is a shell script
that sets most env vars very simillar to what you did manually before
invoking a "neutral" make), instead of running the host "make".
Martin
From: Rob Whitlock <rwhitlock22@gmail.com>
To: Martin Husemann <martin@duskware.de>
Cc: gnats-bugs@netbsd.org
Subject: Re: misc/59594: SSL checkflist build errors
Date: Thu, 14 Aug 2025 13:38:47 -0400
> On Aug 14, 2025, at 1:35 PM, Martin Husemann <martin@duskware.de> wrote:
>
> On Thu, Aug 14, 2025 at 12:44:25PM -0400, Rob Whitlock wrote:
>> export MAKEFLAGS="-m /usr/netbsd/current/src/share/mk"
>
> This should cause the use of /usr/netbsd/current/src/share/mk/bsd.own.mk
> and you should get HAVE_OPENSSL=35, which will cause the right things
> to happen.
>
> Can you try:
>
> cd $NETBSDSRCDIR && make -v HAVE_OPENSSL
>
> ?
That prints 30.
> You have a strange setup, usually one would just do a "build.sh tools"
> once and then use ${TOOLDIR}/bin/nbmake-amd64 (which is a shell script
> that sets most env vars very simillar to what you did manually before
> invoking a "neutral" make), instead of running the host "make".
It's a setup that was derived entirely from official documentation
so I don't see why it should be regarded as strange.
> Martin
From: Martin Husemann <martin@duskware.de>
To: Rob Whitlock <rwhitlock22@gmail.com>
Cc: gnats-bugs@netbsd.org
Subject: Re: misc/59594: SSL checkflist build errors
Date: Thu, 14 Aug 2025 19:43:04 +0200
On Thu, Aug 14, 2025 at 01:38:47PM -0400, Rob Whitlock wrote:
> > Can you try:
> >
> > cd $NETBSDSRCDIR && make -v HAVE_OPENSSL
> >
> > ?
>
> That prints 30.
OK, that is the culprit. Apparently this comes from /usr/share/mk/bsd.own.mk,
instead of $NETBSDSRCDIR/share/mk/bsd.own.mk.
The version with ${TOOLDIR}/bin/nbmake-amd64 works (and gives 35 as answer).
> > You have a strange setup, usually one would just do a "build.sh tools"
> > once and then use ${TOOLDIR}/bin/nbmake-amd64 (which is a shell script
> > that sets most env vars very simillar to what you did manually before
> > invoking a "neutral" make), instead of running the host "make".
>
> It's a setup that was derived entirely from official documentation
> so I don't see why it should be regarded as strange.
s/strange/rare/ :-) and untested.
We need a make expert to help with this. I bet there are make(1) debug
options to trace this further.
Martin
From: Rob Whitlock <rwhitlock22@gmail.com>
To: Martin Husemann <martin@duskware.de>
Cc: gnats-bugs@netbsd.org
Subject: Re: misc/59594: SSL checkflist build errors
Date: Fri, 15 Aug 2025 00:09:02 -0400
> On Aug 14, 2025, at 1:43 PM, Martin Husemann <martin@duskware.de> =
wrote:
>=20
> On Thu, Aug 14, 2025 at 01:38:47PM -0400, Rob Whitlock wrote:
>>> Can you try:
>>>=20
>>> cd $NETBSDSRCDIR && make -v HAVE_OPENSSL
>>>=20
>>> ?
>>=20
>> That prints 30.
>=20
> OK, that is the culprit. Apparently this comes from =
/usr/share/mk/bsd.own.mk,
> instead of $NETBSDSRCDIR/share/mk/bsd.own.mk.
>=20
> The version with ${TOOLDIR}/bin/nbmake-amd64 works (and gives 35 as =
answer).
I changed the MAKEFLAGS line to
MAKEFLAGS=3D"-m $NETBSDSRCDIR/share/mk"
and now make -v HAVE_OPENSSL reports 35, but I deleted all the
build products and kicked off a new build and the error remains.
>>> You have a strange setup, usually one would just do a "build.sh =
tools"
>>> once and then use ${TOOLDIR}/bin/nbmake-amd64 (which is a shell =
script
>>> that sets most env vars very simillar to what you did manually =
before
>>> invoking a "neutral" make), instead of running the host "make".
>>=20
>> It's a setup that was derived entirely from official documentation
>> so I don't see why it should be regarded as strange.
>=20
> s/strange/rare/ :-) and untested.
Fair enough. :-)
> We need a make expert to help with this. I bet there are make(1) debug
> options to trace this further.
>=20
> Martin
From: Rob Whitlock <rwhitlock22@gmail.com>
To: Martin Husemann <martin@duskware.de>
Cc: gnats-bugs@netbsd.org,
dholland@netbsd.org
Subject: Re: misc/59594: SSL checkflist build errors
Date: Fri, 29 Aug 2025 12:13:48 -0400
> On Aug 15, 2025, at 12:09 AM, Rob Whitlock <rwhitlock22@gmail.com> =
wrote:
>=20
>> On Aug 14, 2025, at 1:43 PM, Martin Husemann <martin@duskware.de> =
wrote:
>>=20
>> On Thu, Aug 14, 2025 at 01:38:47PM -0400, Rob Whitlock wrote:
>>>> Can you try:
>>>>=20
>>>> cd $NETBSDSRCDIR && make -v HAVE_OPENSSL
>>>>=20
>>>> ?
>>>=20
>>> That prints 30.
>>=20
>> OK, that is the culprit. Apparently this comes from =
/usr/share/mk/bsd.own.mk,
>> instead of $NETBSDSRCDIR/share/mk/bsd.own.mk.
>>=20
>> The version with ${TOOLDIR}/bin/nbmake-amd64 works (and gives 35 as =
answer).
>=20
> I changed the MAKEFLAGS line to
>=20
> MAKEFLAGS=3D"-m $NETBSDSRCDIR/share/mk"
>=20
> and now make -v HAVE_OPENSSL reports 35, but I deleted all the
> build products and kicked off a new build and the error remains.
>=20
>>>> You have a strange setup, usually one would just do a "build.sh =
tools"
>>>> once and then use ${TOOLDIR}/bin/nbmake-amd64 (which is a shell =
script
>>>> that sets most env vars very simillar to what you did manually =
before
>>>> invoking a "neutral" make), instead of running the host "make".
>>>=20
>>> It's a setup that was derived entirely from official documentation
>>> so I don't see why it should be regarded as strange.
>>=20
>> s/strange/rare/ :-) and untested.
>=20
> Fair enough. :-)
>=20
>> We need a make expert to help with this. I bet there are make(1) =
debug
>> options to trace this further.
>>=20
>> Martin
I had an error in my build procedure. MAKEFLAGS is meant to be set via
environment variable, not as a make variable, so I deleted the MAKEFLAGS
line in mk.conf.amd64. However the error remained.
The correct OpenSSL version was being built, but it was the checkflist =
stage
that was failing. This showed that different parts of the build system =
did not
agree on what should be done.
The src/Makefile buildworld target has a line
${:D make}${MAKEDIRTARGET} distrib/sets checkflist
that recurses down into the distrib/sets directory and invokes the =
checkflist
target of distrib/sets/Makefile. That target runs a command
${SETSCMD} ${.CURSDIR}/checkflist \
${MAKEFLIST_FLAGS} ${CHECKFLIST_FLAGS} ${METALOG.unpriv}
which runs the checkflist script. Within that script, the flist is made =
in
the shell function generate_flist, which runs
${HOST_SH} "${rundir}/makeflist" ${xargs} ${dargs} \
| {SORT -u} | ignore_exceptions >"${SETS_FLIST}
and runs the makeflist script. The makeflist script sources =
${rundir}/sets.subr
for some settings, including the settings for HAVE_OPENSSL. It gets the
values of these variables by running make on the ${rundir}/mkvars.mk
makefile and invoking the mkvars target. The ${rundir}/mkvars.mk =
makefile
includes <bsd.own.mk> in order to get the value for HAVE_OPENSSL.
The problem is that mkvars.mk is invoked with "MAKEFLAGS=3D", which
clears the value of MAKEFLAGS. mkvars.mk then does not know where
the system include directory is, and so when mkvars.mk includes
bsd.own.mk, it uses the one in /usr/share/mk instead of the correct
one in src/share/mk.
This is a recent change, in revision 1.212:
Mon Jul 21 01:46:05 2025 UTC (5 weeks, 4 days ago) by dholland
distrib/sets/sets.subr: clear MAKEFLAGS for all submakes, not just =
some.
Should silence warnings about invalid -J options.
Applying the following patch to HEAD allowed the build to complete
without obvious error.
dholland, can you take a look?
Index: distrib/sets/sets.subr
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
RCS file: /cvsroot/src/distrib/sets/sets.subr,v
retrieving revision 1.212
diff -u -r1.212 sets.subr
--- distrib/sets/sets.subr 21 Jul 2025 01:46:05 -0000 1.212
+++ distrib/sets/sets.subr 29 Aug 2025 14:08:04 -0000
@@ -124,13 +124,13 @@
IFS=3D"
"
=20
-for x in $( MAKEFLAGS=3D MAKEVERBOSE=3D ${MAKE} -B -f =
${rundir}/mkvars.mk mkvars ); do
+for x in $( MAKEVERBOSE=3D ${MAKE} -B -f ${rundir}/mkvars.mk mkvars ); =
do
eval export $x
done
=20
IFS=3D$oIFS
=20
-MKVARS=3D"$( MAKEFLAGS=3D MAKEVERBOSE=3D ${MAKE} -B -f =
${rundir}/mkvars.mk mkvars | ${SED} -e 's,=3D.*,,' | ${XARGS} )"
+MKVARS=3D"$( MAKEVERBOSE=3D ${MAKE} -B -f ${rundir}/mkvars.mk mkvars | =
${SED} -e 's,=3D.*,,' | ${XARGS} )"
=20
#####
=20=
(Contact us)
$NetBSD: query-full-pr,v 1.47 2022/09/11 19:34:41 kim Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2025
The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.
Home