Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 15 Oct 2018 21:49:33 -0400
From:      Eric McCorkle <eric@metricspace.net>
To:        freebsd-current@freebsd.org
Subject:   Re: OpenSSL 1.1.1 Update report (ongoing)
Message-ID:  <def7ee9e-1315-7b72-1fa5-1221645fc350@metricspace.net>
In-Reply-To: <5539d47b-898a-9e21-7b98-7eaaadc2442e@metricspace.net>
References:  <584f2a1c-9ee3-36c1-ce78-681218d73b3a@metricspace.net> <e57f5200-4719-b264-7299-86efba36073d@metricspace.net> <5539d47b-898a-9e21-7b98-7eaaadc2442e@metricspace.net>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--3uq4z5zTpLJGG8ZRHAVIVMTHwExngoSl1
Content-Type: multipart/mixed; boundary="cUgKbCbkWFwowItFQveisvhR74pWWVUvp";
 protected-headers="v1"
From: Eric McCorkle <eric@metricspace.net>
To: freebsd-current@freebsd.org
Message-ID: <def7ee9e-1315-7b72-1fa5-1221645fc350@metricspace.net>
Subject: Re: OpenSSL 1.1.1 Update report (ongoing)
References: <584f2a1c-9ee3-36c1-ce78-681218d73b3a@metricspace.net>
 <e57f5200-4719-b264-7299-86efba36073d@metricspace.net>
 <5539d47b-898a-9e21-7b98-7eaaadc2442e@metricspace.net>
In-Reply-To: <5539d47b-898a-9e21-7b98-7eaaadc2442e@metricspace.net>

--cUgKbCbkWFwowItFQveisvhR74pWWVUvp
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

* gnome-vfs: C compile errors related to openssl, no viable mitigation

Almost done now, though ptlib and gnome-vfs may cause runtime trouble

On 10/14/18 7:13 PM, Eric McCorkle wrote:
> * ptlib; Fails to build, due to C compiler errors arising from
> source-level incompatibilities.  This gets dragged in by opal, which
> ends up being a dependency of ekiga, which is a dependency of gnome3.
> Resolved by adding it to the exclude list, which actually does not seem=

> to be breaking the build of opal.
>=20
> * ffmpeg: autoconf fails to detect openssl.  Probably easily fixable,
> but the trivial workaround is to tick the GNUTLS option (emacs ends
> up dragging in GNUTLS anyway, so it doesn't add more packages)
>=20
> On 10/14/18 1:31 PM, Eric McCorkle wrote:
>> More:
>>
>> * ImageMagick (unrelated to OpenSSL 1.1.1): This fails with the OpenMP=

>> option ticked, due to trying to link with the base ld.  Can be fixed b=
y
>> setting CC, CXX, LD to a port-installed clang, clang++, lld.  The port=

>> should probably do this automatically.
>>
>> * compat-linux-c7-base had a signal 11 when creating a package, which
>> could be ignored without any apparent problem.  Might be related.
>>
>> * evolution-data-server: build process apparently ends up linking
>> against installed evolution libs.  This led to a build failure, due to=

>> missing libssl.so.8.  Trying to deinstall then reinstall.
>>
>> Currently a little over halfway through.
>>
>> On 10/14/18 9:18 AM, Eric McCorkle wrote:
>>> I'm currently in the process of updating my laptop, rebuilding world,=

>>> then rebuilding *all* ports.  I have a large number of ports installe=
d
>>> (around 1200), and I tend to select a lot of build options.
>>>
>>> This report is intended to help shake out issues relating to OpenSSL
>>> 1.1.1.  I'll be adding to this report as things progress.
>>>
>>> So far:
>>>
>>> * I'd seen issues with some C++ files not including string.h.  I can'=
t
>>> seem to reproduce this on my other laptop, so I'm going to assume it'=
s
>>> fixed.
>>>
>>> * Base libpmc jevents issue: buildworld fails for me when building
>>> libpmc.  It appears to be missing a dependency link to build the jeve=
nts
>>> executable in the pmu-events subdirectory.  I was able to work around=

>>> this by manually running make in that directory, then copying the res=
ult
>>> to the object directory for LIB32 builds
>>>
>>> * librtmp: C compile errors directly attributable to OpenSSL 1.1.1
>>> (missing defs, etc)
>>>
>>> * graphics/graphviz circular deps (unrelated to OpenSSL 1.1.1): graph=
viz
>>> with gnomeui and/or librsvg options ticked ends up depending on vala,=

>>> which depends on graphviz.  Unrelated to OpenSSL 1.1.1, but warrants
>>> reporting.
>>>
>>>
>>> That's all so far.  Will send more info as it comes.
>>>
>>
>=20


--cUgKbCbkWFwowItFQveisvhR74pWWVUvp--

--3uq4z5zTpLJGG8ZRHAVIVMTHwExngoSl1
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEvGNLeZs4J0tuYEzVGFxMX1xMlvsFAlvFQ64ACgkQGFxMX1xM
lvslchAA4w+PcmEHW0RaMqnrzfukNCrnsmhWD3iwOk7sILyx4v7pKfyn7ZOxDGDY
X4Puvk//x01byxzZSU8ra5Acjoqeme9gLZQVZMgj5HTN5mG520Ncan7SAH988Bx+
OhjPlVcNPpD8ZNR/DYrq1rHlatA+8cYXFydBX6cEEfI9Jf5/iAJ4yJJznZKOBlUZ
82HspSD1OT7OhfkR1v7zfrz54+wqPl2n7TDR9Wy28KfPcjdDq9RtUR+HcbzUmh1O
pOx68KiFmBecxtacE1/qq8lZeBbnXK3baKIWypw6BBP+/Esnk1s+BZ+fVbw+fd+a
JtYaU5ESC1i/aO+Kdl3IyATD7vijwwhTmEda04QFg44oWlU7pxlH4NDXcNM/UqGa
SdO57TcxzfYwrcHhLuH8rwxdoOzzHS86uHX5TcMyyBaplu+MfeMHTLFtaJiOj1vI
AKTvUHa7rpdn9VVcfsxKO9wrkFabko5cPw97QemYSnR6j5o6e9CxwMjahy6L3MqQ
/zBcprWELy7e2XSpmw6pde8MdZHns6fRvt/pZ/LNfxoNgiWOiJAnZAmZpnVo2NS3
sw2UuWADjOhP5fGZemzpIae9CNTWDtXQp94l4Dh5LwMp4T/B8VguB9ef65DYAtvB
JwAyyXZ7CScZrMGuIzDp/xOX1yV3kS9giv8lOoQQR4uGuUzCM1s=
=CwND
-----END PGP SIGNATURE-----

--3uq4z5zTpLJGG8ZRHAVIVMTHwExngoSl1--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?def7ee9e-1315-7b72-1fa5-1221645fc350>