From: Job Snijders <job@bsd.nl>
Subject: Re: rpki-client: openssl 4 compat
To: Theo Buehler <tb@theobuehler.org>
Cc: tech@openbsd.org
Date: Mon, 27 Apr 2026 20:10:23 +0000

On Mon, Apr 27, 2026 at 09:56:59PM +0200, Theo Buehler wrote:
> > > The openssl bit in regress isn't for commit. I did it this way to keep
> > > the diff small if anyone wants to test that. You'll need to build and
> > > install the security/openssl/4.0 and security/openssl/libretls4 ports.
> > 
> > with the regress piece in my tree, i didn't seem to need libretls4 to
> > run make in /usr/src/regress/usr.sbin/rpki-client/openssl/ - are you and
> > I testing something else? :)
> 
> There are '&& exists(/usr/local/lib/${EOPENSSL}/libtls.a)' where EOPENSSL
> expands to eopenssl40, and without libretls4, this check will be false.
> 
> Without libretls4 it will still compile and run the basic regress tests
> like test-roa.c, etc. But it won't compile rpki-client against libretls4
> and build/obj/rpki-client won't exist (or be old).

Ah, that's great to know! :-) thank you. I was unaware one can get more
milage out of this section of regress by adding the libretls package.

Kind regards,

Job