From a9d690cc5ddb7f75249b5544a52fad269dc1807c Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Thu, 17 Sep 2026 11:00:41 +0200 Subject: [PATCH] package/freeradius-server: add upstream patch to fix build error Buildroot commit 8af3e34fd4a085ea7c25291e50d81fa1a69d9eaf bumped the package from 3.2.8 to 3.2.10. This bump includes upstream commit https://github.com/FreeRADIUS/freeradius-server/commit/d8b95979c710d4e2e3f1115245062fbfc8e9ccba that breaks the build when OpenSSL was built with the option BR2_PACKAGE_LIBOPENSSL_ENABLE_PSK disabled: https://github.com/FreeRADIUS/freeradius-server/pull/5874 To fix the problem we add an upstream commit. Fixes: https://autobuild.buildroot.net/results/bfd/bfdf51b3c28753a50b9cd63d75388ee6000b0444/ Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni --- ...hecks-when-not-supported.-Fixes-5874.patch | 37 +++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 package/freeradius-server/0010-skip-psk-checks-when-not-supported.-Fixes-5874.patch diff --git a/package/freeradius-server/0010-skip-psk-checks-when-not-supported.-Fixes-5874.patch b/package/freeradius-server/0010-skip-psk-checks-when-not-supported.-Fixes-5874.patch new file mode 100644 index 0000000000..3319118b94 --- /dev/null +++ b/package/freeradius-server/0010-skip-psk-checks-when-not-supported.-Fixes-5874.patch @@ -0,0 +1,37 @@ +From 7f2a41eaff5a58cb0014dc2fc95438b6a0a55ee1 Mon Sep 17 00:00:00 2001 +From: "Alan T. DeKok" +Date: Fri, 5 Jun 2026 09:55:00 -0400 +Subject: [PATCH] skip psk checks when not supported. Fixes #5874 + +Upstream: https://github.com/FreeRADIUS/freeradius-server/commit/7f2a41eaff5a58cb0014dc2fc95438b6a0a55ee1 + +Signed-off-by: Bernd Kuhls +--- + src/main/tls.c | 5 +++++ + 1 file changed, 5 insertions(+) + +diff --git a/src/main/tls.c b/src/main/tls.c +index 3018f34cc0..4f4cd0c280 100644 +--- a/src/main/tls.c ++++ b/src/main/tls.c +@@ -524,12 +524,17 @@ tls_session_t *tls_new_client_session(TALLOC_CTX *ctx, fr_tls_server_conf_t *con + * if we're doing certificate auth, and not PSK. + */ + verify_mode = SSL_VERIFY_PEER; ++#ifdef PSK_MAX_IDENTITY_LEN + if (!conf->psk_identity) { ++#endif + RDEBUG2("(TLS) Requiring Server certificate"); + verify_mode |= SSL_VERIFY_FAIL_IF_NO_PEER_CERT; ++ ++#ifdef PSK_MAX_IDENTITY_LEN + } else { + RDEBUG2("(TLS) PSK configured -- verifying Server certificate if presented"); + } ++#endif + SSL_set_verify(ssn->ssl, verify_mode, cbtls_verify); + + SSL_set_ex_data(ssn->ssl, FR_TLS_EX_INDEX_CONF, (void *)conf); +-- +2.47.3 +