From owner-freebsd-ports@FreeBSD.ORG Wed Jan 13 18:38:44 2010 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 957801065692; Wed, 13 Jan 2010 18:38:44 +0000 (UTC) (envelope-from bf1783@googlemail.com) Received: from mail-ew0-f211.google.com (mail-ew0-f211.google.com [209.85.219.211]) by mx1.freebsd.org (Postfix) with ESMTP id 04F148FC08; Wed, 13 Jan 2010 18:38:43 +0000 (UTC) Received: by ewy3 with SMTP id 3so19949322ewy.13 for ; Wed, 13 Jan 2010 10:38:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=UsIyJmD6m2f5fc3EtkK3GuDrax5XQ/VraC/BHY5X4M4=; b=HgGdWpVll1Sq+YYE2YkLga+pm1LqCSGivYSim5tBvaXm81cdG++TowfQbLz3VXI2Mr q8jtHsVF187oGrvAKiSFqklv3awjMeu/TTYzYvQj/N1zzzwX7t6ootXHJfF5R83icnlo KpOyPaioahREhPT4xcac1fCsEzsYALDNkpL8Q= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=HsshjYNKg+7H2GNc8rn9QcbqcROU0Uz7M56kZ1aPt6YZTEyJjjiADUQYLRcAyDjP4U 60r5/GH/+yfJu/0JmquuwwSlHzCJHOwfZgUPUOPte6Bo28v6UGH88GP7bKkXXW9cnEPA icqdfmVe4hf9Y86TKmIeh+nN5nV6OCKI1aRtA= MIME-Version: 1.0 Received: by 10.216.86.137 with SMTP id w9mr429680wee.104.1263407916989; Wed, 13 Jan 2010 10:38:36 -0800 (PST) In-Reply-To: References: Date: Wed, 13 Jan 2010 13:38:36 -0500 Message-ID: From: "b. f." To: dinoex@freebsd.org Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-ports@freebsd.org Subject: Re: security/openssl BROKEN, DEPRECATED, and EXPIRED? X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Jan 2010 18:38:44 -0000 On 1/13/10, b. f. wrote: > I note that there are still a few obvious minor flaws after the most > recent commits, including what looks like an unintentional inversion > of the logic surrounding the SSE2 option. I'm attaching a suggested > patch. In addition to the other changes, it seems that we should issue EXTRACONFIGURE+= no-threads when !defined(WITH_OPENSSL_THREADS). Also, I note that the krb5-related code seems to be disabled, because the necessary configure flags are not issued. Regards, b.