The workaround committed to tor-0.4.8.19 for this issue is for the
*client side* i.e. the machine running OpenSSL 3.5 which is unable
to connect to those relays running current libressl.

i.e. updating tor on the OpenBSD side in ports would not help.

It is too late to get into 7.8-release packages at this point anyway.

The actual *fix* (as opposed to workaround) will be in libressl on the
server side. There is an initial fix but it is not completely ready yet
so I believe that would most likely be post-release.




On 2025/10/08 16:08, openbsd@systemfailure.net wrote:
> Hello,
> 
> Here's a (very simple) patch for net/tor-0.4.8.19, which was released a few days ago.
> 
> This new version ships with an important bug fix for Tor relays built with LibreSSL. Basically, with the previous release, those relays were unreachable because of a TLS error.
> 
> I could reproduce this bug myself by launching a Tor bridge, and I can confirm this is fixed in 0.4.8.19 (using the latest Tor browser, which is not in ports yet, on different platforms).
> 
> Changelog: https://gitlab.torproject.org/tpo/core/tor/-/raw/release-0.4.8/ReleaseNotes
> 
> I know that ports are locked down right now, but IMHO this issue is important enough (basically you cannot run a relay on OpenBSD using the current package) to be worth an update anyway. But I'm not the one making the decision ;-)
> 
> Best regards.

> Index: Makefile
> ===================================================================
> RCS file: /cvs/ports/net/tor/Makefile,v
> diff -u -p -r1.173 Makefile
> --- Makefile	28 Sep 2025 10:04:47 -0000	1.173
> +++ Makefile	7 Oct 2025 05:34:16 -0000
> @@ -1,6 +1,6 @@
>  COMMENT=	anonymity service using onion routing
>  
> -DISTNAME=	tor-0.4.8.18
> +DISTNAME=	tor-0.4.8.19
>  CATEGORIES=	net
>  HOMEPAGE=	https://www.torproject.org/
>  
> Index: distinfo
> ===================================================================
> RCS file: /cvs/ports/net/tor/distinfo,v
> diff -u -p -r1.138 distinfo
> --- distinfo	24 Sep 2025 18:24:58 -0000	1.138
> +++ distinfo	7 Oct 2025 05:34:16 -0000
> @@ -1,2 +1,2 @@
> -SHA256 (tor-0.4.8.18.tar.gz) = SupsEJ1O/06iuvuQWn5rCpZdFP6FYhSwL82QRrTZOvg=
> -SIZE (tor-0.4.8.18.tar.gz) = 10139317
> +SHA256 (tor-0.4.8.19.tar.gz) = PLZJodM7pqZfEJ0iRTTpOq8KbehKWxy0sFS/oGu3T1o=
> +SIZE (tor-0.4.8.19.tar.gz) = 10160196