Openvpn2 +pkcs11 Variant Fails to Build - use of undeclared identifiers 'CK_RSA_PKCS_PSS_PARAMS' and 'pss_params'

[RobK88]

I am unable to build openvpn2 +pkcs11 variant on Lion and on High Sierra with the same errors. It looks like the +pkcs11 variant is broken.

bash-3.2$ sudo port clean openvpn2
--->  Cleaning openvpn2
bash-3.2$ 
bash-3.2$ sudo port install openvpn2 +pkcs11
--->  Computing dependencies for openvpn2
--->  Fetching archive for openvpn2
--->  Attempting to fetch openvpn2-2.6.6_0+pkcs11.darwin_11.x86_64.tbz2 from http://packages.macports.org/openvpn2
--->  Attempting to fetch openvpn2-2.6.6_0+pkcs11.darwin_11.x86_64.tbz2 from http://ywg.ca.packages.macports.org/mirror/macports/packages/openvpn2
--->  Attempting to fetch openvpn2-2.6.6_0+pkcs11.darwin_11.x86_64.tbz2 from http://mirror.fcix.net/macports/packages/openvpn2
--->  Fetching distfiles for openvpn2
--->  Verifying checksums for openvpn2
--->  Extracting openvpn2
--->  Configuring openvpn2
--->  Building openvpn2                                  
Error: Failed to build openvpn2: command execution failed
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/main.log for details.
Error: Follow https://guide.macports.org/#project.tickets if you believe there is a bug.
Error: Processing of port openvpn2 failed
bash-3.2$

When trying to install with the -v option, one sees:

pkcs11_openssl.c:168:5: error: use of undeclared identifier 'CK_RSA_PKCS_PSS_PARAMS'
    CK_RSA_PKCS_PSS_PARAMS pss_params = {0};
    ^
pkcs11_openssl.c:214:32: error: use of undeclared identifier 'pss_params'
            mech.pParameter = &pss_params;
                               ^
pkcs11_openssl.c:215:42: error: use of undeclared identifier 'pss_params'
            mech.ulParameterLen = sizeof(pss_params);
                                         ^
3 errors generated.
make[3]: *** [pkcs11_openssl.o] Error 1
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.6/src/openvpn'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.6/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.6'
make: *** [all] Error 2
make: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.6'
Command failed:  cd "/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.6" && /usr/bin/make -j4 -w all 
Exit code: 2
Error: Failed to build openvpn2: command execution failed

I have attached main.log for more info.

I also tried compiling using clang-15 but it also fails.

bash-3.2$ sudo port clean openvpn2
--->  Cleaning openvpn2
bash-3.2$ 
bash-3.2$ sudo port install openvpn2 +pkcs11 configure.compiler=macports-clang-15
--->  Computing dependencies for openvpn2
--->  Fetching archive for openvpn2
--->  Attempting to fetch openvpn2-2.6.6_0+pkcs11.darwin_11.x86_64.tbz2 from http://packages.macports.org/openvpn2
--->  Attempting to fetch openvpn2-2.6.6_0+pkcs11.darwin_11.x86_64.tbz2 from http://ywg.ca.packages.macports.org/mirror/macports/packages/openvpn2
--->  Attempting to fetch openvpn2-2.6.6_0+pkcs11.darwin_11.x86_64.tbz2 from http://mirror.fcix.net/macports/packages/openvpn2
--->  Fetching distfiles for openvpn2
--->  Verifying checksums for openvpn2
--->  Extracting openvpn2
--->  Configuring openvpn2
--->  Building openvpn2                                  
Error: Failed to build openvpn2: command execution failed
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/main.log for details.
Error: Follow https://guide.macports.org/#project.tickets if you believe there is a bug.
Error: Processing of port openvpn2 failed
bash-3.2$

[RobK88]

FYI -- the bug still exists with openvpn2 version 2.6.7. i.e. the +pkcs11 variant is still broken.

bash-3.2$ sudo port clean openvpn2
--->  Cleaning openvpn2

bash-3.2$ sudo port -vs install openvpn2 +pkcs11
--->  Computing dependencies for openvpn2.
--->  Fetching distfiles for openvpn2
--->  Verifying checksums for openvpn2
--->  Checksumming openvpn-2.6.7.tar.gz
--->  Extracting openvpn2
--->  Extracting openvpn-2.6.7.tar.gz

etc
etc

pkcs11_openssl.c:166:5: error: use of undeclared identifier 'CK_RSA_PKCS_PSS_PARAMS'
    CK_RSA_PKCS_PSS_PARAMS pss_params = {0};
    ^
pkcs11_openssl.c:212:32: error: use of undeclared identifier 'pss_params'
            mech.pParameter = &pss_params;
                               ^
depbase=`echo options.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\
	/usr/bin/clang -DHAVE_CONFIG_H -I. -I../.. -I../../include  -I../../include -I../../src/compat -I/opt/local/include  -I/opt/local/libexec/openssl3/include     -DPLUGIN_LIBDIR=\"/opt/local/lib/openvpn/plugins\"  -Wall -pipe -Os -arch x86_64 -std=c99 -MT options.o -MD -MP -MF $depbase.Tpo -c -o options.o options.c &&\
	mv -f $depbase.Tpo $depbase.Po
pkcs11_openssl.c:213:42: error: use of undeclared identifier 'pss_params'
            mech.ulParameterLen = sizeof(pss_params);
                                         ^
3 errors generated.
make[3]: *** [pkcs11_openssl.o] Error 1
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.7/src/openvpn'
make[2]: *** [all-recursive] Error 1
make[2]: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.7/src'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.7'
make: *** [all] Error 2
make: Leaving directory `/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.7'
Command failed:  cd "/opt/local/var/macports/build/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/work/openvpn-2.6.7" && /usr/bin/make -j4 -w all 
Exit code: 2
Error: Failed to build openvpn2: command execution failed
Error: See /opt/local/var/macports/logs/_opt_local_var_macports_sources_rsync.macports.org_macports_release_tarballs_ports_net_openvpn2/openvpn2/main.log for details.
Error: Follow https://guide.macports.org/#project.tickets if you believe there is a bug.
Error: Processing of port openvpn2 failed

[i0ntempest]

In df0bd04de296391d7d6b2faa86c054660a186acf/macports-ports (master):

pkcs11-helper: update to 1.29.0

Closes: #68180

[RobK88]

@i0ntempest - Many thanks! I can confirm that I was able to successfully build the openvpn2 +pkcs11 variant on my Mac running Lion!