From owner-freebsd-ports@freebsd.org Thu Oct 27 16:35:32 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4DB09C23D14 for ; Thu, 27 Oct 2016 16:35:32 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (prod2.absolight.net [79.143.243.136]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "plouf.absolight.net", Issuer "CAcert Class 3 Root" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id ED3856D8; Thu, 27 Oct 2016 16:35:31 +0000 (UTC) (envelope-from mat@FreeBSD.org) Received: from prod2.absolight.net (localhost [127.0.0.1]) by prod2.absolight.net (Postfix) with ESMTP id 383E1BDCE4; Thu, 27 Oct 2016 18:35:29 +0200 (CEST) Received: from ogg.in.absolight.net (ogg.in.absolight.net [79.143.241.239]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by prod2.absolight.net (Postfix) with ESMTPSA id ED57EBDCE2; Thu, 27 Oct 2016 18:35:28 +0200 (CEST) Subject: Re: lighttpd does not pull OpenSSL dependency To: "Matthew D. Fuller" References: <201610252214.u9PME6br070248@gw.catspoiler.org> <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org> <20161027150035.GP79735@over-yonder.net> Cc: David Demelier , Don Lewis , mad@madpilot.net, freebsd-ports@freebsd.org From: Mathieu Arnold Organization: Absolight / The FreeBSD Foundation Message-ID: Date: Thu, 27 Oct 2016 18:35:25 +0200 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.4.0 MIME-Version: 1.0 In-Reply-To: <20161027150035.GP79735@over-yonder.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="vSdo1CniQ40iIjHqI2AOINbft6DMUiigu" X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2016 16:35:32 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --vSdo1CniQ40iIjHqI2AOINbft6DMUiigu Content-Type: multipart/mixed; boundary="KN0ScMBnDcbKn9ffeDUnTvpNufHpLgw0K"; protected-headers="v1" From: Mathieu Arnold To: "Matthew D. Fuller" Cc: David Demelier , Don Lewis , mad@madpilot.net, freebsd-ports@freebsd.org Message-ID: Subject: Re: lighttpd does not pull OpenSSL dependency References: <201610252214.u9PME6br070248@gw.catspoiler.org> <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org> <20161027150035.GP79735@over-yonder.net> In-Reply-To: <20161027150035.GP79735@over-yonder.net> --KN0ScMBnDcbKn9ffeDUnTvpNufHpLgw0K Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Le 27/10/2016 =C3=A0 17:00, Matthew D. Fuller a =C3=A9crit : > On Thu, Oct 27, 2016 at 03:05:03PM +0200 I heard the voice of > Mathieu Arnold, and lo! it spake thus: >> Once you install openssl from ports, the ports framework will use >> it, always. > That is absolutely not the case since OpenSSL in base was updated to > .so.8 and ports wasn't re-bumped past it. Everything gets confused > all the time. Well, that is another problem, and you are right, OpenSSL's shlib should have been bumped, blame the former maintainer for that. I'll talk to the new maintainer about that. > https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D209582 > > Even in an e.g. net/ntp rebuilt just now: > > % ldd /usr/local/sbin/ntpd | grep -E '(crypto|ssl)' > libcrypto.so.8 =3D> /usr/local/lib/libcrypto.so.8 (0x800cea000)= > libssl.so.8 =3D> /usr/lib/libssl.so.8 (0x801ae6000) > > Just looking at a ldd through /usr/local I'm finding tons of things > that are still linking to base libcrypto. STuff from ldns, nginx, > Virtualbox, libwww, lots of X pieces... > > This makes me *EXTREMELY* nervous about upgrading _any_ systems where > I'm using ports OpenSSL to stable/11. > > --=20 Mathieu Arnold --KN0ScMBnDcbKn9ffeDUnTvpNufHpLgw0K-- --vSdo1CniQ40iIjHqI2AOINbft6DMUiigu Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJYEizPXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQzQUI2OTc4OUQyRUQxMjEwNjQ0MEJBNUIz QTQ1MTZGMzUxODNDRTQ4AAoJEDpFFvNRg85IvR8P/3PnPJIKzoD/zPXK/GYcsIbs q2lfZwiE/knj4eNTasfW3fSfzUjYUhCc4vOPy5CE84sW0GVsNJ18bhNKnZD/znQa /ZUl6v8Qpg9uUiu7bAbFCqdSSp0Ig6bYwdxmAjaMj+ELUNCFBCp2oIa+VrPV1+ap dip+zdzYm74bEekPzuLrZEvnG/QNUBXDuRTI5rzl6jCGip/urt7/mFuEEDjuuvLQ nG31JJ69vL6jPMp8APTcg/yp57BK/IYzl1KW/CJmJvizhnOv8Ih9Z68f3Dcqa5Xi yAuraDbu7cnaMSkc8yJd/LL73N7AWaxFqgRYik4Wo3ROcMJ5QNMkn5nd6YGwjJlW U6kcLcavcvk5QEsDeuggc2XjdyUva7W4HZm7KUSGIdC+S4euG4MPQs0yhgPphj6B 3YVnKnHd6znerTJpm3bea7P4O1CtmIr4gdZOE/7zccxV8wunqgk2Yd5JzEYifpKb 04ESbfswizgHXcttDTfZcy6EMM2D2W0nj428oUMYOR9a+fyDT3UMj9b07+mfkChF PqWGB0x6GhEoyaIhrLCiU3Am9LdJ2/v8Lod6hzvHECZBlDSXCgvZaEqEVfIzmpm5 ghjex6bJXEnKm3wEHe8xEyHSs7kpSvoQlw7bFBRnPWYSNFRmVGRAkKGgjkr39Hgr J8/nTIoL6Ll3g+pve2ZU =CciX -----END PGP SIGNATURE----- --vSdo1CniQ40iIjHqI2AOINbft6DMUiigu--