* [Buildroot] [PATCH 1/1] package/freeradius-server: add upstream patch to fix build error
@ 2026-09-17 9:00 Bernd Kuhls
2026-10-10 16:32 ` Thomas Petazzoni via buildroot
0 siblings, 1 reply; 2+ messages in thread
From: Bernd Kuhls @ 2026-09-17 9:00 UTC (permalink / raw)
To: buildroot; +Cc: David GOUARIN
Buildroot commit 8af3e34fd4a085ea7c25291e50d81fa1a69d9eaf bumped the
package from 3.2.8 to 3.2.10. This bump includes upstream commit
https://github.com/FreeRADIUS/freeradius-server/commit/d8b95979c710d4e2e3f1115245062fbfc8e9ccba
that breaks the build when OpenSSL was built with the option
BR2_PACKAGE_LIBOPENSSL_ENABLE_PSK disabled:
https://github.com/FreeRADIUS/freeradius-server/pull/5874
To fix the problem we add an upstream commit.
Fixes:
https://autobuild.buildroot.net/results/bfd/bfdf51b3c28753a50b9cd63d75388ee6000b0444/
Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
---
...hecks-when-not-supported.-Fixes-5874.patch | 37 +++++++++++++++++++
1 file changed, 37 insertions(+)
create mode 100644 package/freeradius-server/0009-skip-psk-checks-when-not-supported.-Fixes-5874.patch
diff --git a/package/freeradius-server/0009-skip-psk-checks-when-not-supported.-Fixes-5874.patch b/package/freeradius-server/0009-skip-psk-checks-when-not-supported.-Fixes-5874.patch
new file mode 100644
index 0000000000..3319118b94
--- /dev/null
+++ b/package/freeradius-server/0009-skip-psk-checks-when-not-supported.-Fixes-5874.patch
@@ -0,0 +1,37 @@
+From 7f2a41eaff5a58cb0014dc2fc95438b6a0a55ee1 Mon Sep 17 00:00:00 2001
+From: "Alan T. DeKok" <aland@freeradius.org>
+Date: Fri, 5 Jun 2026 09:55:00 -0400
+Subject: [PATCH] skip psk checks when not supported. Fixes #5874
+
+Upstream: https://github.com/FreeRADIUS/freeradius-server/commit/7f2a41eaff5a58cb0014dc2fc95438b6a0a55ee1
+
+Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
+---
+ src/main/tls.c | 5 +++++
+ 1 file changed, 5 insertions(+)
+
+diff --git a/src/main/tls.c b/src/main/tls.c
+index 3018f34cc0..4f4cd0c280 100644
+--- a/src/main/tls.c
++++ b/src/main/tls.c
+@@ -524,12 +524,17 @@ tls_session_t *tls_new_client_session(TALLOC_CTX *ctx, fr_tls_server_conf_t *con
+ * if we're doing certificate auth, and not PSK.
+ */
+ verify_mode = SSL_VERIFY_PEER;
++#ifdef PSK_MAX_IDENTITY_LEN
+ if (!conf->psk_identity) {
++#endif
+ RDEBUG2("(TLS) Requiring Server certificate");
+ verify_mode |= SSL_VERIFY_FAIL_IF_NO_PEER_CERT;
++
++#ifdef PSK_MAX_IDENTITY_LEN
+ } else {
+ RDEBUG2("(TLS) PSK configured -- verifying Server certificate if presented");
+ }
++#endif
+ SSL_set_verify(ssn->ssl, verify_mode, cbtls_verify);
+
+ SSL_set_ex_data(ssn->ssl, FR_TLS_EX_INDEX_CONF, (void *)conf);
+--
+2.47.3
+
--
2.47.3
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-10-10 16:33 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-17 9:00 [Buildroot] [PATCH 1/1] package/freeradius-server: add upstream patch to fix build error Bernd Kuhls
2026-10-10 16:32 ` Thomas Petazzoni via buildroot
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.