=> Bootstrap dependency digest>=20010302: found digest-20160304
===> Skipping vulnerability checks.
WARNING: No /var/db/pkg/pkg-vulnerabilities file found.
WARNING: To fix run: `/usr/sbin/pkg_admin -K /var/db/pkg fetch-pkg-vulnerabilities'.
=> Checksum SHA1 OK for ldns-1.6.17.tar.gz
=> Checksum RMD160 OK for ldns-1.6.17.tar.gz
=> Checksum SHA512 OK for ldns-1.6.17.tar.gz
===> Installing dependencies for ldns-1.6.17nb6
==========================================================================
The following variables will affect the build process of this package,
ldns-1.6.17nb6.  Their current value is shown below:

        * SSLBASE = /usr
        * SSLCERTS = /etc/openssl/certs
        * SSLDIR = /etc/openssl
        * SSLKEYS = /etc/openssl/private

You may want to abort the process now with CTRL-C and change their value
before continuing.  Be sure to run `/usr/bin/make clean' after
the changes.
==========================================================================
=> Tool dependency libtool-base>=2.4.2nb9: found libtool-base-2.4.6nb1
=> Tool dependency gmake>=3.81: found gmake-4.1nb4
=> Tool dependency perl>=5.0: found perl-5.26.2
=> Tool dependency checkperms>=1.1: found checkperms-1.12
=> Build dependency cwrappers>=20150314: found cwrappers-20180325
===> Overriding tools for ldns-1.6.17nb6
===> Extracting for ldns-1.6.17nb6
===> Patching for ldns-1.6.17nb6
=> Applying pkgsrc patches for ldns-1.6.17nb6
=> Verifying /data/pkgsrc/net/ldns/patches/patch-doc_doxyparse.pl
=> Applying pkgsrc patch /data/pkgsrc/net/ldns/patches/patch-doc_doxyparse.pl
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|$NetBSD: patch-doc_doxyparse.pl,v 1.1 2015/06/18 13:04:29 jperkin Exp $
|
|perl-5.22 compatibility.
|
|--- doc/doxyparse.pl.orig	2014-01-10 21:04:41.000000000 +0000
|+++ doc/doxyparse.pl
--------------------------
Patching file doc/doxyparse.pl using Plan A...
Hunk #1 succeeded at 273.
done
=> Verifying /data/pkgsrc/net/ldns/patches/patch-examples_ldns-keygen.c
=> Applying pkgsrc patch /data/pkgsrc/net/ldns/patches/patch-examples_ldns-keygen.c
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|$NetBSD: patch-examples_ldns-keygen.c,v 1.2 2015/06/18 13:04:29 jperkin Exp $
|
|Get bugfix #573: ldns-keygen write private keys with mode 0600.
|From http://git.nlnetlabs.nl/ldns/commit/?h=develop&id=169f38c1e25750f935838b670871056428977e6b
|Fixes CVE-2014-3209.
|
|--- examples/ldns-keygen.c.orig	2014-01-10 21:04:41.000000000 +0000
|+++ examples/ldns-keygen.c
--------------------------
Patching file examples/ldns-keygen.c using Plan A...
Hunk #1 succeeded at 10.
Hunk #2 succeeded at 51.
Hunk #3 succeeded at 254.
Hunk #4 succeeded at 300.
done
=> Verifying /data/pkgsrc/net/ldns/patches/patch-parse.c
=> Applying pkgsrc patch /data/pkgsrc/net/ldns/patches/patch-parse.c
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|$NetBSD: patch-parse.c,v 1.2 2018/02/13 15:08:11 he Exp $
|
|Apply fix for CVE-2017-1000231, via
|https://git.nlnetlabs.nl/ldns/commit/?id=c8391790
|
|--- parse.c.orig	2014-01-10 21:04:41.000000000 +0000
|+++ parse.c
--------------------------
Patching file parse.c using Plan A...
Hunk #1 succeeded at 118.
done
=> Verifying /data/pkgsrc/net/ldns/patches/patch-str2host.c
=> Applying pkgsrc patch /data/pkgsrc/net/ldns/patches/patch-str2host.c
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|$NetBSD: patch-str2host.c,v 1.1 2018/02/13 15:08:11 he Exp $
|
|Apply fix for CVE-2017-1000232 from
|https://git.nlnetlabs.nl/ldns/commit/?id=3bdeed02
|
|--- str2host.c.orig	2014-01-10 21:04:41.000000000 +0000
|+++ str2host.c
--------------------------
Patching file str2host.c using Plan A...
Hunk #1 succeeded at 1458.
done
===> Creating toolchain wrappers for ldns-1.6.17nb6
===> Configuring for ldns-1.6.17nb6
=> Modifying GNU configure scripts to avoid --recheck
=> Replacing config-guess with pkgsrc versions
=> Replacing config-sub with pkgsrc versions
=> Replacing install-sh with pkgsrc version
=> Replacing Perl interpreter in doc/doxyparse.pl.
=> Checking for portability problems in extracted files
checking for x86_64--netbsd-gcc... clang
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether clang accepts -g... yes
checking for clang option to accept ISO C89... none needed
checking how to run the C preprocessor... clang -E
checking for grep that handles long lines and -e... (cached) /usr/bin/grep
checking for egrep... (cached) /usr/bin/egrep
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking minix/config.h usability... no
checking minix/config.h presence... no
checking for minix/config.h... no
checking whether it is safe to define __EXTENSIONS__... yes
checking build system type... x86_64--netbsd
checking host system type... x86_64--netbsd
checking how to print strings... printf
checking for a sed that does not truncate output... /usr/bin/sed
checking for fgrep... /usr/bin/grep -F
checking for ld used by clang... /usr/bin/ld
checking if the linker (/usr/bin/ld) is GNU ld... yes
checking for BSD- or MS-compatible name lister (nm)... /usr/bin/nm -B
checking the name lister (/usr/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... (cached) 262144
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... no
checking how to convert x86_64--netbsd file names to x86_64--netbsd format... func_convert_file_noop
checking how to convert x86_64--netbsd file names to toolchain format... func_convert_file_noop
checking for /usr/bin/ld option to reload object files... -r
checking for x86_64--netbsd-objdump... no
checking for objdump... objdump
checking how to recognize dependent libraries... match_pattern /lib[^/]+(\.so|_pic\.a)$
checking for x86_64--netbsd-dlltool... no
checking for dlltool... no
checking how to associate runtime and link libraries... printf %s\n
checking for x86_64--netbsd-ar... no
checking for ar... ar
checking for archiver @FILE support... @
checking for x86_64--netbsd-strip... no
checking for strip... strip
checking for x86_64--netbsd-ranlib... no
checking for ranlib... ranlib
checking for gawk... /usr/bin/awk
checking command to parse /usr/bin/nm -B output from clang object... ok
checking for sysroot... no
checking for x86_64--netbsd-mt... no
checking for mt... mt
checking if mt is a manifest tool... no
checking for dlfcn.h... yes
checking for objdir... .libs
checking if clang supports -fno-rtti -fno-exceptions... yes
checking for clang option to produce PIC... -fPIC -DPIC
checking if clang PIC flag -fPIC -DPIC works... yes
checking if clang static flag -static works... yes
checking if clang supports -c -o file.o... rm: conftest*: No such file or directory
yes
checking if clang supports -c -o file.o... (cached) yes
checking whether the clang linker (/usr/bin/ld) supports shared libraries... yes
checking whether -lc should be explicitly linked in... rm: conftest*: No such file or directory
no
checking dynamic linker characteristics... NetBSD ld.elf_so
checking how to hardcode library paths into programs... immediate
checking whether stripping libraries is possible... yes
checking if libtool supports shared libraries... yes
checking whether to build shared libraries... yes
checking whether to build static libraries... yes
checking for x86_64--netbsd-gcc... (cached) clang
checking whether we are using the GNU C compiler... (cached) yes
checking whether clang accepts -g... (cached) yes
checking for clang option to accept ISO C89... (cached) none needed
checking clang dependency flag... -MM
checking whether make sets $(MAKE)... yes
checking whether clang supports -std=c99... yes
checking whether clang supports -xc99... no
checking for an ANSI C-conforming const... yes
checking whether clang supports -Wall... yes
checking whether clang supports -W... yes
checking whether clang supports -Wwrite-strings... yes
checking whether clang supports -Wstrict-prototypes... yes
checking for getopt.h... yes
checking for time.h... yes
checking for winsock2.h... no
checking for ws2tcpip.h... no
checking whether clang supports -Werror... yes
checking whether clang supports -Wall... (cached) yes
checking whether clang supports -std=c99... (cached) yes
checking whether clang supports -xc99... (cached) no
checking for getopt.h... (cached) yes
checking for time.h... (cached) yes
checking whether we need -std=c99 -D__EXTENSIONS__ -D_BSD_SOURCE -D_POSIX_C_SOURCE=200112 -D_XOPEN_SOURCE=600 -D_XOPEN_SOURCE_EXTENDED=1 -D_ALL_SOURCE as a flag for clang... failed
checking whether we need -std=c99 -D__EXTENSIONS__ -D_BSD_SOURCE -D_POSIX_C_SOURCE=200112 -D_XOPEN_SOURCE=600 -D_ALL_SOURCE as a flag for clang... failed
checking whether we need -std=c99 as a flag for clang... no
checking whether we need -D_BSD_SOURCE as a flag for clang... no
checking whether we need -D_GNU_SOURCE as a flag for clang... no
checking whether we need -D_GNU_SOURCE -D_FRSRESGID as a flag for clang... failed
checking whether we need -D_POSIX_C_SOURCE=200112 as a flag for clang... no
checking whether we need -D__EXTENSIONS__ as a flag for clang... no
checking for inline... inline
checking for int8_t... yes
checking for int16_t... yes
checking for int32_t... yes
checking for int64_t... yes
checking for uint8_t... yes
checking for uint16_t... yes
checking for uint32_t... yes
checking for uint64_t... yes
checking for doxygen... no
checking for library containing socket... none required
checking for library containing inet_pton... none required
checking for x86_64--netbsd-ar... no
checking for ar... /usr/bin/ar
checking for SSL... found in /usr
checking for HMAC_CTX_init in -lcrypto... no
checking if -lcrypto needs -lgdi32... no
checking if -lcrypto needs -ldl... no
configure: error: OpenSSL found in /usr, but version 0.9.7 or higher is required
*** Error code 1

Stop.
make[1]: stopped in /data/pkgsrc/net/ldns
*** Error code 1

Stop.
make: stopped in /data/pkgsrc/net/ldns