2.7.10 fails to build on FreeBSD 11-CURRENT

[tony]

Let me know if there is anything else I can provide.

This is pyenv installed via pyenv-installer.

$ pyenv --version
pyenv 20151006-6-g39a6b09

$ freebsd-version; uname -a          
11.0-CURRENT
FreeBSD z600 11.0-CURRENT FreeBSD 11.0-CURRENT #11: Sat Oct 31 02:03:51 CDT 2015     root@z600:/usr/obj/usr/src/sys/MYKERNEL  amd64

$ pkg-config --libs openssl; pkg-config --cflags openssl;
-L/usr/local/lib -lssl -lcrypto  
-I/usr/local/include

$ pkg info -l openssl | head -n 120
openssl-1.0.2_4:
    /usr/local/bin/c_rehash
    /usr/local/bin/openssl
    /usr/local/include/openssl/aes.h
    /usr/local/include/openssl/asn1.h
    /usr/local/include/openssl/asn1_mac.h
    /usr/local/include/openssl/asn1t.h
    /usr/local/include/openssl/bio.h
    /usr/local/include/openssl/blowfish.h
    /usr/local/include/openssl/bn.h
    /usr/local/include/openssl/buffer.h
    /usr/local/include/openssl/camellia.h
    /usr/local/include/openssl/cast.h
    /usr/local/include/openssl/cmac.h
    /usr/local/include/openssl/cms.h
    /usr/local/include/openssl/comp.h
    /usr/local/include/openssl/conf.h
    /usr/local/include/openssl/conf_api.h
    /usr/local/include/openssl/crypto.h
    /usr/local/include/openssl/des.h
    /usr/local/include/openssl/des_old.h
    /usr/local/include/openssl/dh.h
    /usr/local/include/openssl/dsa.h
    /usr/local/include/openssl/dso.h
    /usr/local/include/openssl/dtls1.h
    /usr/local/include/openssl/e_os2.h
    /usr/local/include/openssl/ebcdic.h
    /usr/local/include/openssl/ec.h
    /usr/local/include/openssl/ecdh.h
    /usr/local/include/openssl/ecdsa.h
    /usr/local/include/openssl/engine.h
    /usr/local/include/openssl/err.h
    /usr/local/include/openssl/evp.h
    /usr/local/include/openssl/hmac.h
    /usr/local/include/openssl/idea.h
    /usr/local/include/openssl/krb5_asn.h
    /usr/local/include/openssl/kssl.h
    /usr/local/include/openssl/lhash.h
    /usr/local/include/openssl/md2.h
    /usr/local/include/openssl/md4.h
    /usr/local/include/openssl/md5.h
    /usr/local/include/openssl/mdc2.h
    /usr/local/include/openssl/modes.h
    /usr/local/include/openssl/obj_mac.h
    /usr/local/include/openssl/objects.h
    /usr/local/include/openssl/ocsp.h
    /usr/local/include/openssl/opensslconf.h
    /usr/local/include/openssl/opensslv.h
    /usr/local/include/openssl/ossl_typ.h
    /usr/local/include/openssl/pem.h
    /usr/local/include/openssl/pem2.h
    /usr/local/include/openssl/pkcs12.h
    /usr/local/include/openssl/pkcs7.h
    /usr/local/include/openssl/pqueue.h
    /usr/local/include/openssl/rand.h
    /usr/local/include/openssl/rc2.h
    /usr/local/include/openssl/rc4.h
    /usr/local/include/openssl/ripemd.h
    /usr/local/include/openssl/rsa.h
    /usr/local/include/openssl/safestack.h
    /usr/local/include/openssl/seed.h
    /usr/local/include/openssl/sha.h
    /usr/local/include/openssl/srp.h
    /usr/local/include/openssl/srtp.h
    /usr/local/include/openssl/ssl.h
    /usr/local/include/openssl/ssl2.h
    /usr/local/include/openssl/ssl23.h
    /usr/local/include/openssl/ssl3.h
    /usr/local/include/openssl/stack.h
    /usr/local/include/openssl/symhacks.h
    /usr/local/include/openssl/tls1.h
    /usr/local/include/openssl/ts.h
    /usr/local/include/openssl/txt_db.h
    /usr/local/include/openssl/ui.h
    /usr/local/include/openssl/ui_compat.h
    /usr/local/include/openssl/whrlpool.h
    /usr/local/include/openssl/x509.h
    /usr/local/include/openssl/x509_vfy.h
    /usr/local/include/openssl/x509v3.h
    /usr/local/lib/engines/lib4758cca.so
    /usr/local/lib/engines/libaep.so
    /usr/local/lib/engines/libatalla.so
    /usr/local/lib/engines/libcapi.so
    /usr/local/lib/engines/libchil.so
    /usr/local/lib/engines/libcswift.so
    /usr/local/lib/engines/libgmp.so
    /usr/local/lib/engines/libgost.so
    /usr/local/lib/engines/libnuron.so
    /usr/local/lib/engines/libpadlock.so
    /usr/local/lib/engines/libsureware.so
    /usr/local/lib/engines/libubsec.so
    /usr/local/lib/libcrypto.a
    /usr/local/lib/libcrypto.so
    /usr/local/lib/libcrypto.so.8
    /usr/local/lib/libssl.a
    /usr/local/lib/libssl.so
    /usr/local/lib/libssl.so.8
    /usr/local/libdata/pkgconfig/libcrypto.pc
    /usr/local/libdata/pkgconfig/libssl.pc
    /usr/local/libdata/pkgconfig/openssl.pc


$ pkg info openssl
openssl-1.0.2_4
Name           : openssl
Version        : 1.0.2_4
Installed on   : Sat Oct 17 21:59:20 CDT 2015
Origin         : security/openssl
Architecture   : freebsd:11:x86:64
Prefix         : /usr/local
Categories     : security devel
Licenses       : 
Maintainer     : dinoex@FreeBSD.org
WWW            : http://www.openssl.org/
Comment        : SSL and crypto library
Options        :
    ASM            : off
    DOCS           : on
    EC             : on
    EXPCIPHERS     : off
    GMP            : off
    I386           : off
    MAN3           : on
    MD2            : on
    PADLOCK        : off
    RC5            : off
    RFC3779        : off
    SCTP           : on
    SHARED         : on
    SSE2           : on
    SSL2           : on
    SSL3           : on
    THREADS        : on
    ZLIB           : off
Shared Libs provided:
    libaep.so
    libnuron.so
    libgmp.so
    libubsec.so
    libssl.so.8
    libcrypto.so.8
    libcapi.so
    libpadlock.so
    libatalla.so
    libsureware.so
    lib4758cca.so
    libcswift.so
    libgost.so
    libchil.so
Annotations    :
    cpe            : cpe:2.3:a:openssl:openssl:1.0.2d:::::freebsd11:x64:4
    repo_type      : binary
    repository     : FreeBSD
Flat size      : 11.2MiB
Description    :
The OpenSSL Project is a collaborative effort to develop a robust,
commercial-grade, full-featured, and Open Source toolkit implementing
the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security
(TLS v1) protocols with full-strength cryptography world-wide. The
project is managed by a worldwide community of volunteers that use
the Internet to communicate, plan, and develop the OpenSSL tookit
and its related documentation.

OpenSSL is based on the excellent SSLeay library developed by Eric
A. Young and Tim J. Hudson. The OpenSSL toolkit is licensed under
an Apache-style licence, which basically means that you are free
to get and use it for commercial and non-commercial purposes subject
to some simple license conditions.

WWW: http://www.openssl.org/
WWW: http://sctp.fh-muenster.de/dtls-patches.html

build log: https://gist.github.com/tony/ec4e06b3e86cb258a95b

[yyuu]

*** WARNING: renaming "_ssl" since importing it failed: build/lib.freebsd-11.0-CURRENT-amd64-2.7/_ssl.so: Undefined symbol "SSLv2_method"

This could be the cause. It looks like something related to OPENSSL_NO_SSL2 is not working properly at least on your system.

$ pkg info openssl
openssl-1.0.2_4
Name : openssl
Version : 1.0.2_4
Installed on : Sat Oct 17 21:59:20 CDT 2015
Origin : security/openssl
Architecture : freebsd:11:x86:64
Prefix : /usr/local
Categories : security devel
Licenses :
Maintainer : dinoex@FreeBSD.org
WWW : http://www.openssl.org/
Comment : SSL and crypto library
Options :
(... snip ...)
SSL2 : on

Because SSLv2 is insecure nowadays, I'd recommend you to rebuild openssl without SSL2. I think it should solve the build issue of CPython.

Otherwise, CFLAGS="-DOPENSSL_NO_SSL2" might work. I think it'd be better to disable openssl completely.

[tony]

Thank you, that did the trick.

[tony]

Do you think it's worth mentioning this at /~https://github.com/yyuu/pyenv/wiki/Common-build-problems#error-the-python-ssl-extension-was-not-compiled-missing-the-openssl-lib? I can add a note.

[yyuu]

I think it's helpful. I'm happy if you update the page. Thanks.

[tony]

Done. thank you