From owner-freebsd-ports@FreeBSD.ORG Fri Mar 7 07:49:19 2014 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B58B4BEC; Fri, 7 Mar 2014 07:49:19 +0000 (UTC) Received: from mail-ig0-x230.google.com (mail-ig0-x230.google.com [IPv6:2607:f8b0:4001:c05::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 71E4F9A7; Fri, 7 Mar 2014 07:49:19 +0000 (UTC) Received: by mail-ig0-f176.google.com with SMTP id uy17so1295522igb.3 for ; Thu, 06 Mar 2014 23:49:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=rYeZ1Uio11OAu7wcVoCV3Im4svc56NOXtlsMQKGZwZM=; b=sKUj3P5v9YP5Gm63F0pyuipymjfRTU3D0tGCp2AAIvVjyg/xTh4St1eRuaZYoyDWMa ps/YHhdKQEO5MRfzqIqvEXfHv6oWDUMUfMAaxJfEptCXSUxk8xT7u6izBjx0INoyz1l5 kJApxnQtG/K+sUCKNinWyioA9t3u9e+zDvNhGWQ7Fw5DQTMzbkVpIgzLJX+f07koCkBC 0Qrws4uioPxH62JxQ1bkacfUQTItED5wPv9FvKHRd+HERpCUvmL7eYNXkwdx8ZnOtwQ9 BkLMNouh7JowMbvbwB2axYjPkcfDJEak/r2wBkrYrGXTj9Bn7mJ9ghUWDjwqo+Yh8SbL u4tA== MIME-Version: 1.0 X-Received: by 10.43.51.65 with SMTP id vh1mr14550757icb.24.1394178558820; Thu, 06 Mar 2014 23:49:18 -0800 (PST) Received: by 10.50.164.227 with HTTP; Thu, 6 Mar 2014 23:49:18 -0800 (PST) In-Reply-To: <53192954.5070707@laskoprinting.com> References: <53111711.1010907@laskoprinting.com> <5318DA3A.8090408@laskoprinting.com> <13A9A291-538E-4A62-B0B2-E6F43BEE7C5B@FreeBSD.org> <53192954.5070707@laskoprinting.com> Date: Fri, 7 Mar 2014 01:49:18 -0600 Message-ID: Subject: Re: ports/182985 maintainer timeout From: Scot Hetzel To: Darren Pilgrim Content-Type: text/plain; charset=ISO-8859-1 Cc: FreeBSD Ports , portsmgr@freebsd.org X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 07 Mar 2014 07:49:19 -0000 On Thu, Mar 6, 2014 at 8:05 PM, Darren Pilgrim wrote: > On 3/6/2014 3:07 PM, Mark Felder wrote: >> >> Hi Darren, >> >> I'm trying to understand exactly what we're looking at here. Is the >> problem: >> >> "nginx always builds against OpenSSL in base (for FreeBSD 10+?)" ? >> >> If so, that's correct; it should not build against OpenSSL from ports >> just because the version from ports happens to be installed. > > > No, actually, that's exactly what it should do. If I install OpenSSL from > ports and set WITH_OPENSSL_PORT in /etc/make.conf, the express intent is to > require all OpenSSL-using ports to link to the ports version. > > Nginx with SPDY needs NPN, which means OpenSSL 1.0.1 or later. Thus for 9.x > and earlier we need to set WITH_OPENSSL_PORT. For 10.0 and later, both > versions will work, so the correct behaviour for nginx is to say it does not > specifically require either by not setting either WITH_OPENSSL_* variable. > Darren is correct, the intent of bsd.openssl.mk is to build using the security/openssl port when WITH_OPENSSL_PORT is defined in /etc/make.conf by the local administrator. What the www/nginx port does is it forces the build to always use the base version when ${OSVERSION} >= 1000028 by setting WITH_OPENSSL_BASE. The port should not be doing this. -- DISCLAIMER: No electrons were maimed while sending this message. Only slightly bruised.