ipsec-tools: Fix compilation without deprecated OpenSSL 1.0.2 APIs

Signed-off-by: Rosen Penev <[email protected]>

diff --git a/net/ipsec-tools/Makefile b/net/ipsec-tools/Makefile
index 24b3ce9e2774411b499c596165c47089c835e22b..317df78ed6c619ac1b9189f78daf18a62f6849e2 100644 (file)
--- a/net/ipsec-tools/Makefile
+++ b/net/ipsec-tools/Makefile
@@ -11,7 +11,7 @@ include $(INCLUDE_DIR)/kernel.mk
 
 PKG_NAME:=ipsec-tools
 PKG_VERSION:=0.8.2
-PKG_RELEASE:=8
+PKG_RELEASE:=9
 PKG_MAINTAINER:=Noah Meyerhans <[email protected]>, \
        Vitaly Protsko <[email protected]>
 PKG_LICENSE := BSD-3-Clause

diff --git a/net/ipsec-tools/patches/020-openssl-deprecated.patch b/net/ipsec-tools/patches/020-openssl-deprecated.patch
new file mode 100644 (file)
index 0000000..3c2cca1
--- /dev/null
+++ b/net/ipsec-tools/patches/020-openssl-deprecated.patch
@@ -0,0 +1,21 @@
+--- a/src/racoon/crypto_openssl.c
++++ b/src/racoon/crypto_openssl.c
+@@ -1087,7 +1087,7 @@ eay_strerror()
+       int line, flags;
+       unsigned long es;
+ 
+-#if OPENSSL_VERSION_NUMBER >= 0x10100000L
++#if OPENSSL_VERSION_NUMBER >= 0x10000000L
+       es = 0; /* even when allowed by OPENSSL_API_COMPAT, it is defined as 0 */
+ #else
+       es = CRYPTO_thread_id();
+--- a/src/racoon/openssl_compat.h
++++ b/src/racoon/openssl_compat.h
+@@ -5,6 +5,7 @@
+ #if OPENSSL_VERSION_NUMBER < 0x10100000L
+ 
+ #include <openssl/rsa.h>
++#include <openssl/bn.h>
+ #include <openssl/dh.h>
+ #include <openssl/evp.h>
+ #include <openssl/hmac.h>