failure to build on OpenBSD 5.6 (Kyle's buildslave) due to OpenSSL not having ALPN-related symbols

[daira]

From ​https://tahoe-lafs.org/buildbot-tahoe-lafs/builders/Kyle%20OpenBSD%20amd64/builds/150/steps/tox/logs/stdio :

py27 installed: allmydata-tahoe==1.10.2.post91,attrs==15.2.0,cffi==1.5.2,characteristic==14.3.0,cryptography==1.2.3,enum34==1.1.2,foolscap==0.10.1,idna==2.0,ipaddress==1.0.16,Nevow==0.13.0,pyasn1==0.1.9,pyasn1-modules==0.0.8,pycparser==2.14,pycrypto==2.6.1,pycryptopp==0.7.1.869544967005693312591928092448767568728501330214,pyOpenSSL==0.15.1,pyutil==2.0.0,service-identity==16.0.0,simplejson==3.8.2,six==1.10.0,Twisted==16.0.0,zbase32==1.1.5,zfec==1.4.24,zope.interface==4.1.3
py27 runtests: PYTHONHASHSEED='2106991117'
py27 runtests: commands[0] | tahoe --version
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_get0_alpn_selected'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_select_cb'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_get0_alpn_selected'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_select_cb'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_get0_alpn_selected'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_select_cb'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_get0_alpn_selected'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_select_cb'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_protos'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_get0_alpn_selected'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_CTX_set_alpn_select_cb'
/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin/python2.7:/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/_openssl.so: undefined symbol 'SSL_set_alpn_protos'
Traceback (most recent call last):
  File ".tox/py27/bin/tahoe", line 7, in <module>
    from allmydata.scripts.runner import run
  File "/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/allmydata/__init__.py", line 457, in <module>
    check_all_requirements()
  File "/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/allmydata/__init__.py", line 455, in check_all_requirements
    raise PackagingError(get_error_string(fatal_errors + _cross_check_errors, debug=True))
allmydata.PackagingError: 
ImportError: for requirement 'pyOpenSSL >= 0.14': (<type 'exceptions.ImportError'>, 'Cannot load specified object', ('/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/openssl/binding.py', 14, '<module>', 'from cryptography.hazmat.bindings._openssl import ffi, lib'))
Warning: dependency 'pyopenssl' could not be imported. pkg_resources thought it should be possible to import version '0.15.1' from '/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages'.
The exception trace was (<type 'exceptions.ImportError'>, 'Cannot load specified object', ('/var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages/cryptography/hazmat/bindings/openssl/binding.py', 14, '<module>', 'from cryptography.hazmat.bindings._openssl import ffi, lib')).

For debugging purposes, the PYTHONPATH was
  None
install_requires was
  ['setuptools >= 20.3', 'zfec >= 1.1.0', 'simplejson >= 1.4', 'zope.interface >= 3.6.0, != 3.6.3, != 3.6.4', 'foolscap >= 0.10.1', 'pycrypto >= 2.1.0, != 2.2, != 2.4', 'pycryptopp >= 0.6.0', 'service-identity', 'characteristic >= 14.0.0', 'pyasn1 >= 0.1.8', 'pyasn1-modules >= 0.0.5', 'Twisted >= 13.0.0', 'Nevow >= 0.11.1', 'pyOpenSSL >= 0.14']
sys.path after importing pkg_resources was
  /var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/bin:
  /var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python27.zip:
  /var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7:
  /var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/plat-openbsd5:
  /var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/lib-tk:
  /var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/lib-old:
  /var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/lib-dynload:
  /usr/local/lib/python2.7:
  /usr/local/lib/python2.7/plat-openbsd5:
  /var/buildslave/tahoe-lafs/Kyle_OpenBSD_amd64/build/.tox/py27/lib/python2.7/site-packages

[warner]

We've determined that OpenBSD-5.6 has a version of LibreSSL (LibreSSL-2.0) that doesn't have ALPN symbols, but doesn't have a version string that allows cryptography to detect it properly.

The current release is OpenBSD-5.8, which works ok (thanks to sickness for testing this). The operators of our openbsd buildslaves are planning to upgrade to 5.8 sometime this summer when some new hardware becomes available.

In talking with the cryptography folks, it sounds like they don't have any immediate plans to be compatible with the older LibreSSL-2.0 . The first step would probably be for somebody to provide them an OpenBSD-5.6 buildslave (they use Jenkins, but reaperhulk has offered to configure a buildslave if someone gives him root).

​https://github.com/pyca/cryptography/issues/1639 is related.

[crd]

It doesn't look to me like the version of cryptography in pypi is even compatible with the modern version of LibreSSL 2.3.2 in OpenBSD-5.9.

Here's what I get when I tried to build tahoe-lafs-1.11.0 on OpenBSD-5.9 using the usual virtualenv method:

n150:/home/crd:11$ virtualenv tahoe-lafs
New python executable in tahoe-lafs/bin/python2.7
Also creating executable in tahoe-lafs/bin/python
Installing setuptools, pip, wheel...done.
n150:/home/crd:12$ . tahoe-lafs/bin/activate
(tahoe-lafs)n150:/home/crd:13$ pip install --user --find-links=https://tahoe-lafs.org/deps tahoe-l>
(tahoe-lafs)n150:/home/crd:13$ pip install --find-links=https://tahoe-lafs.org/deps tahoe-lafs    >
(tahoe-lafs)n150:/home/crd:13$ pip install --find-links=https://tahoe-lafs.org/deps tahoe-lafs
You are using pip version 7.0.3, however version 8.1.1 is available.
You should consider upgrading via the 'pip install --upgrade pip' command.
Collecting tahoe-lafs
Requirement already satisfied (use --upgrade to upgrade): setuptools>=11.3 in ./tahoe-lafs/lib/python2.7/site-packages (from tahoe-lafs)
Collecting zope.interface!=3.6.3,!=3.6.4,>=3.6.0 (from tahoe-lafs)
Collecting Nevow>=0.11.1 (from tahoe-lafs)
  Using cached Nevow-0.13.0-py2-none-any.whl
Collecting pyasn1>=0.1.8 (from tahoe-lafs)
  Using cached pyasn1-0.1.9-py2.py3-none-any.whl
Collecting foolscap>=0.10.1 (from tahoe-lafs)
  Using cached foolscap-0.11.0-py2-none-any.whl
Collecting pycrypto!=2.2,!=2.4,>=2.1.0 (from tahoe-lafs)
Collecting pyOpenSSL>=0.14 (from tahoe-lafs)
  Using cached pyOpenSSL-16.0.0-py2.py3-none-any.whl
Collecting Twisted[tls]>=15.1.0 (from tahoe-lafs)
Collecting characteristic>=14.0.0 (from tahoe-lafs)
  Using cached characteristic-14.3.0-py2.py3-none-any.whl
Collecting zfec>=1.1.0 (from tahoe-lafs)
Collecting pycryptopp>=0.6.0 (from tahoe-lafs)
Collecting service-identity (from tahoe-lafs)
  Using cached service_identity-16.0.0-py2.py3-none-any.whl
Collecting pyasn1-modules>=0.0.5 (from tahoe-lafs)
  Using cached pyasn1_modules-0.0.8-py2.py3-none-any.whl
Collecting simplejson>=1.4 (from tahoe-lafs)
Collecting cryptography>=1.3 (from pyOpenSSL>=0.14->tahoe-lafs)
  Using cached cryptography-1.3.1.tar.gz
Collecting six>=1.5.2 (from pyOpenSSL>=0.14->tahoe-lafs)
  Using cached six-1.10.0-py2.py3-none-any.whl
Collecting idna>=0.6 (from Twisted[tls]>=15.1.0->tahoe-lafs)
  Using cached idna-2.1-py2-none-any.whl
Collecting pyutil>=1.3.19 (from zfec>=1.1.0->tahoe-lafs)
  Using cached https://tahoe-lafs.org/deps/pyutil-2.0.0-py2-none-any.whl
Collecting attrs (from service-identity->tahoe-lafs)
  Using cached attrs-15.2.0-py2.py3-none-any.whl
Collecting enum34 (from cryptography>=1.3->pyOpenSSL>=0.14->tahoe-lafs)
  Using cached https://tahoe-lafs.org/deps/enum34-1.1.2-cp27-none-any.whl
Collecting ipaddress (from cryptography>=1.3->pyOpenSSL>=0.14->tahoe-lafs)
  Using cached ipaddress-1.0.16-py27-none-any.whl
Collecting cffi>=1.4.1 (from cryptography>=1.3->pyOpenSSL>=0.14->tahoe-lafs)
Collecting zbase32>=1.0 (from pyutil>=1.3.19->zfec>=1.1.0->tahoe-lafs)
  Using cached https://tahoe-lafs.org/deps/zbase32-1.1.5-py2-none-any.whl
Collecting pycparser (from cffi>=1.4.1->cryptography>=1.3->pyOpenSSL>=0.14->tahoe-lafs)
  Using cached https://tahoe-lafs.org/deps/pycparser-2.14-cp27-none-any.whl
Building wheels for collected packages: cryptography
  Running setup.py bdist_wheel for cryptography
  Complete output from command /home/crd/tahoe-lafs/bin/python2.7 -c "import setuptools;__file__='/tmp/pip-build-M2hczj/cryptography/setup.py';exec(compile(open(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" bdist_wheel -d /tmp/tmprebG9bpip-wheel-:
  _configtest.c:1: error: thread-local storage not supported for this target
  Note: will not use '__thread' in the C code
  The above error message can be safely ignored

  Installed /tmp/pip-build-M2hczj/cryptography/.eggs/cffi-1.5.2-py2.7-openbsd-5.9-amd64.egg
  Searching for pycparser
  Reading https://pypi.python.org/simple/pycparser/
  Best match: pycparser 2.14
  Downloading https://pypi.python.org/packages/source/p/pycparser/pycparser-2.14.tar.gz#md5=a2bc8d28c923b4fe2b2c3b4b51a4f935
  Processing pycparser-2.14.tar.gz
  Writing /tmp/easy_install-8rsSga/pycparser-2.14/setup.cfg
  Running pycparser-2.14/setup.py -q bdist_egg --dist-dir /tmp/easy_install-8rsSga/pycparser-2.14/egg-dist-tmp-JCVgOd
  warning: no previously-included files matching 'yacctab.*' found under directory 'tests'
  warning: no previously-included files matching 'lextab.*' found under directory 'tests'
  warning: no previously-included files matching 'yacctab.*' found under directory 'examples'
  warning: no previously-included files matching 'lextab.*' found under directory 'examples'
  zip_safe flag not set; analyzing archive contents...
  Moving pycparser-2.14-py2.7.egg to /tmp/pip-build-M2hczj/cryptography/.eggs

  Installed /tmp/pip-build-M2hczj/cryptography/.eggs/pycparser-2.14-py2.7.egg
  running bdist_wheel
  running build
  running build_py
  creating build
  creating build/lib.openbsd-5.9-amd64-2.7
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography
  copying src/cryptography/__about__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography
  copying src/cryptography/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography
  copying src/cryptography/exceptions.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography
  copying src/cryptography/fernet.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography
  copying src/cryptography/utils.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat
  copying src/cryptography/hazmat/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/x509
  copying src/cryptography/x509/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/x509
  copying src/cryptography/x509/base.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/x509
  copying src/cryptography/x509/extensions.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/x509
  copying src/cryptography/x509/general_name.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/x509
  copying src/cryptography/x509/name.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/x509
  copying src/cryptography/x509/oid.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/x509
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends
  copying src/cryptography/hazmat/backends/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends
  copying src/cryptography/hazmat/backends/interfaces.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends
  copying src/cryptography/hazmat/backends/multibackend.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings
  copying src/cryptography/hazmat/bindings/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  copying src/cryptography/hazmat/primitives/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  copying src/cryptography/hazmat/primitives/cmac.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  copying src/cryptography/hazmat/primitives/constant_time.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  copying src/cryptography/hazmat/primitives/hashes.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  copying src/cryptography/hazmat/primitives/hmac.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  copying src/cryptography/hazmat/primitives/keywrap.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  copying src/cryptography/hazmat/primitives/padding.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  copying src/cryptography/hazmat/primitives/serialization.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/commoncrypto
  copying src/cryptography/hazmat/backends/commoncrypto/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/commoncrypto
  copying src/cryptography/hazmat/backends/commoncrypto/backend.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/commoncrypto
  copying src/cryptography/hazmat/backends/commoncrypto/ciphers.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/commoncrypto
  copying src/cryptography/hazmat/backends/commoncrypto/hashes.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/commoncrypto
  copying src/cryptography/hazmat/backends/commoncrypto/hmac.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/commoncrypto
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/backend.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/ciphers.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/cmac.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/decode_asn1.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/dsa.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/ec.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/encode_asn1.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/hashes.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/hmac.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/rsa.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/utils.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  copying src/cryptography/hazmat/backends/openssl/x509.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/backends/openssl
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings/commoncrypto
  copying src/cryptography/hazmat/bindings/commoncrypto/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings/commoncrypto
  copying src/cryptography/hazmat/bindings/commoncrypto/binding.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings/commoncrypto
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings/openssl
  copying src/cryptography/hazmat/bindings/openssl/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings/openssl
  copying src/cryptography/hazmat/bindings/openssl/_conditional.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings/openssl
  copying src/cryptography/hazmat/bindings/openssl/binding.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/bindings/openssl
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/asymmetric
  copying src/cryptography/hazmat/primitives/asymmetric/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/asymmetric
  copying src/cryptography/hazmat/primitives/asymmetric/dh.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/asymmetric
  copying src/cryptography/hazmat/primitives/asymmetric/dsa.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/asymmetric
  copying src/cryptography/hazmat/primitives/asymmetric/ec.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/asymmetric
  copying src/cryptography/hazmat/primitives/asymmetric/padding.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/asymmetric
  copying src/cryptography/hazmat/primitives/asymmetric/rsa.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/asymmetric
  copying src/cryptography/hazmat/primitives/asymmetric/utils.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/asymmetric
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/ciphers
  copying src/cryptography/hazmat/primitives/ciphers/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/ciphers
  copying src/cryptography/hazmat/primitives/ciphers/algorithms.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/ciphers
  copying src/cryptography/hazmat/primitives/ciphers/base.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/ciphers
  copying src/cryptography/hazmat/primitives/ciphers/modes.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/ciphers
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/interfaces
  copying src/cryptography/hazmat/primitives/interfaces/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/interfaces
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/kdf
  copying src/cryptography/hazmat/primitives/kdf/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/kdf
  copying src/cryptography/hazmat/primitives/kdf/concatkdf.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/kdf
  copying src/cryptography/hazmat/primitives/kdf/hkdf.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/kdf
  copying src/cryptography/hazmat/primitives/kdf/pbkdf2.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/kdf
  copying src/cryptography/hazmat/primitives/kdf/x963kdf.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/kdf
  creating build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/twofactor
  copying src/cryptography/hazmat/primitives/twofactor/__init__.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/twofactor
  copying src/cryptography/hazmat/primitives/twofactor/hotp.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/twofactor
  copying src/cryptography/hazmat/primitives/twofactor/totp.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/twofactor
  copying src/cryptography/hazmat/primitives/twofactor/utils.py -> build/lib.openbsd-5.9-amd64-2.7/cryptography/hazmat/primitives/twofactor
  running egg_info
  writing requirements to src/cryptography.egg-info/requires.txt
  writing src/cryptography.egg-info/PKG-INFO
  writing top-level names to src/cryptography.egg-info/top_level.txt
  writing dependency_links to src/cryptography.egg-info/dependency_links.txt
  writing entry points to src/cryptography.egg-info/entry_points.txt
  warning: manifest_maker: standard file '-c' not found

  reading manifest file 'src/cryptography.egg-info/SOURCES.txt'
  reading manifest template 'MANIFEST.in'
  no previously-included directories found matching 'docs/_build'
  warning: no previously-included files matching '*' found under directory 'vectors'
  writing manifest file 'src/cryptography.egg-info/SOURCES.txt'
  running build_ext
  generating cffi module 'build/temp.openbsd-5.9-amd64-2.7/_padding.c'
  creating build/temp.openbsd-5.9-amd64-2.7
  generating cffi module 'build/temp.openbsd-5.9-amd64-2.7/_constant_time.c'
  generating cffi module 'build/temp.openbsd-5.9-amd64-2.7/_openssl.c'
  building '_openssl' extension
  creating build/temp.openbsd-5.9-amd64-2.7/build
  creating build/temp.openbsd-5.9-amd64-2.7/build/temp.openbsd-5.9-amd64-2.7
  cc -pthread -fno-strict-aliasing -O2 -pipe -DNDEBUG -O2 -pipe -fPIC -fPIC -I/usr/local/include/python2.7 -c build/temp.openbsd-5.9-amd64-2.7/_openssl.c -o build/temp.openbsd-5.9-amd64-2.7/build/temp.openbsd-5.9-amd64-2.7/_openssl.o
  build/temp.openbsd-5.9-amd64-2.7/_openssl.c:423:27: error: openssl/e_os2.h: No such file or directory
  error: command 'cc' failed with exit status 1

  ----------------------------------------
  Failed building wheel for cryptography
Failed to build cryptography
Installing collected packages: zope.interface, idna, pyasn1, six, enum34, ipaddress, pycparser, cffi, cryptography, pyOpenSSL, pyasn1-modules, attrs, service-identity, Twisted, Nevow, foolscap, pycrypto, characteristic, zbase32, pyutil, zfec, pycryptopp, simplejson, tahoe-lafs
  Running setup.py install for cryptography
    Complete output from command /home/crd/tahoe-lafs/bin/python2.7 -c "import setuptools, tokenize;__file__='/tmp/pip-build-M2hczj/cryptography/setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" install --record /tmp/pip-9gaYu8-record/install-record.txt --single-version-externally-managed --compile --install-headers /home/crd/tahoe-lafs/include/site/python2.7/cryptography:
    running install
    running build
    running build_py
    running egg_info
    writing requirements to src/cryptography.egg-info/requires.txt
    writing src/cryptography.egg-info/PKG-INFO
    writing top-level names to src/cryptography.egg-info/top_level.txt
    writing dependency_links to src/cryptography.egg-info/dependency_links.txt
    writing entry points to src/cryptography.egg-info/entry_points.txt
    warning: manifest_maker: standard file '-c' not found

    reading manifest file 'src/cryptography.egg-info/SOURCES.txt'
    reading manifest template 'MANIFEST.in'
    no previously-included directories found matching 'docs/_build'
    warning: no previously-included files matching '*' found under directory 'vectors'
    writing manifest file 'src/cryptography.egg-info/SOURCES.txt'
    running build_ext
    generating cffi module 'build/temp.openbsd-5.9-amd64-2.7/_padding.c'
    already up-to-date
    generating cffi module 'build/temp.openbsd-5.9-amd64-2.7/_constant_time.c'
    already up-to-date
    generating cffi module 'build/temp.openbsd-5.9-amd64-2.7/_openssl.c'
    already up-to-date
    building '_openssl' extension
    cc -pthread -fno-strict-aliasing -O2 -pipe -DNDEBUG -O2 -pipe -fPIC -fPIC -I/usr/local/include/python2.7 -c build/temp.openbsd-5.9-amd64-2.7/_openssl.c -o build/temp.openbsd-5.9-amd64-2.7/build/temp.openbsd-5.9-amd64-2.7/_openssl.o
    build/temp.openbsd-5.9-amd64-2.7/_openssl.c:423:27: error: openssl/e_os2.h: No such file or directory
    error: command 'cc' failed with exit status 1

    ----------------------------------------
Command "/home/crd/tahoe-lafs/bin/python2.7 -c "import setuptools, tokenize;__file__='/tmp/pip-build-M2hczj/cryptography/setup.py';exec(compile(getattr(tokenize, 'open', open)(__file__).read().replace('\r\n', '\n'), __file__, 'exec'))" install --record /tmp/pip-9gaYu8-record/install-record.txt --single-version-externally-managed --compile --install-headers /home/crd/tahoe-lafs/include/site/python2.7/cryptography" failed with error code 1 in /tmp/pip-build-M2hczj/cryptography
(tahoe-lafs)n150:/home/crd:14$

It's worth noting that py-cryptography-1.2.1 from OpenBSD's binary packages does work because of the patches found in ​http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security/py-cryptography/patches/

Perhaps these patches have not been accepted in the upstream py-cryptography project.

[exarkun]

Buildbot has been decommissioned and there is no longer any OpenBSD CI. OpenBSD is basically not a supported platform at this time.

This doesn't mean the project does not welcome contributions to improve Tahoe-LAFS behavior on OpenBSD. On the contrary. Such would be extremely welcome. The only reason OpenBSD is not actively being supported is that no such contributions have been forthcoming recently.