From owner-freebsd-ports@freebsd.org Sat Jul 16 12:43:59 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 99D52B99FBD for ; Sat, 16 Jul 2016 12:43:59 +0000 (UTC) (envelope-from jim@ohlste.in) Received: from mail-qk0-x230.google.com (mail-qk0-x230.google.com [IPv6:2607:f8b0:400d:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5411916B0 for ; Sat, 16 Jul 2016 12:43:58 +0000 (UTC) (envelope-from jim@ohlste.in) Received: by mail-qk0-x230.google.com with SMTP id x1so38670139qkb.3 for ; Sat, 16 Jul 2016 05:43:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ohlste-in.20150623.gappssmtp.com; s=20150623; h=subject:to:references:cc:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=BFQ69MaWUmuLfJGzUdB1S95Bp6gVkoXyR8/k4DltwGk=; b=qAwbI1lY53gZO+gVGbl9E/oAhAnoK0oyZ60LNLqRF2LuR3JjTgfK4ZP3SvAWa0a+o7 WIwSfa0vrtzub5G376eEfFmhbEBFZP01MI2XJPZLZOJe49Ns6+i5E4HVWEESAHTR9Lgy wfMD4RgDxxsKD95yr3wAorqoeJYD0eDYFtS9SZ1WgFNHTPA7vl9s41YBt4lqjflP3/5B VLgSERGRIM5LcRxd9v42Pz28qPLsIAuKjtydVNYX0NvG59TGtsTcTzLJWBQ4TRVQpUOq ZRgRe0n5wrDyuWEP9dwotSXF8zdNV74j69D9ngQegkANIBlulMg2EPIqTxr41N0oQ/jF 7kXg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=BFQ69MaWUmuLfJGzUdB1S95Bp6gVkoXyR8/k4DltwGk=; b=cTkATJsN9t2H45AJYGJ+FyDS3UV7WAxvQ+NLKcNHdRRGnKnbCGTAjiW2fLgReeJPqh sBPiQ9aEcZy4MjlnBfhELb/r0UjQ27wtnBAUUWnJluKzzEfDqTzOmaU/EDEmh8F6hvq3 4OzF7dys05dHpbR2ODPei0gCYhXK07tNQBnXl42kRV7lkCHr5T9uLvjWvwHS9lBtJM+4 9Im+1Oc19p+E76Py0kpUukXQTwuEw2Z/Ufz1Mer+M47/KV5tUbi7MliJyNu1f3+5Haov YOYUi8u87zKVNFhiqiP8b+AY5ZuVnTixBvMu9bXm1Kn4+/fhHMYbP92AJr5PesVJROq7 ARng== X-Gm-Message-State: ALyK8tK+tMtaKM6I61kdJWz8g3GH5rfGymN7SLrSjVMzMn43n8EDZUfclciwcZ69NweyKw== X-Received: by 10.55.110.69 with SMTP id j66mr18563550qkc.72.1468673037887; Sat, 16 Jul 2016 05:43:57 -0700 (PDT) Received: from [192.168.1.18] (pool-96-249-243-37.nrflva.fios.verizon.net. [96.249.243.37]) by smtp.googlemail.com with ESMTPSA id m11sm2163251qke.36.2016.07.16.05.43.56 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sat, 16 Jul 2016 05:43:57 -0700 (PDT) Subject: Re: curl and nginx no longer build on same host To: Euan Thoms References: <7c8b-5789ad00-d-6b8b4580@127157337> Cc: FreeBSD Ports Mailing List From: Jim Ohlstein Message-ID: Date: Sat, 16 Jul 2016 08:43:55 -0400 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:45.0) Gecko/20100101 Thunderbird/45.2.0 MIME-Version: 1.0 In-Reply-To: <7c8b-5789ad00-d-6b8b4580@127157337> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jul 2016 12:43:59 -0000 Hello, On 7/15/16 11:41 PM, Euan Thoms wrote: > > On Saturday, July 16, 2016 10:21 SGT, Jim Ohlstein wrote: > >> Hello, >> >>> On Jul 15, 2016, at 10:03 PM, Euan Thoms wrote: >>> >>> Bump >>> >>> Can anyone else install or update ftp/curl after installing nginx? > >> >> Yes, but I'm building packages using poudriere, not using portmaster. > > Good point, it may be a portmaster issue. Next time I update, I'll try to upgrade manually... eh, how do I do that again (scratches head). > >> >>> >>> The only way I'm able to update now is to uninstall openssl and nginx, then update curl, then reinstall nginx (which pulls in openssl). This was not required on several previous update cycles. >> >> If memory serves me correctly, nginx and curl both require openssl from ports only if certain options are chosen (http2 being one), or at least that was the case in the past. >> >> You may have option(s) selected for one that requires the version from ports, and one that does not. >> >> Have you tried to force usage of openssl from ports in your /etc/make.conf? >> > > Yes. I've used ssl=openssl and ssl=libressl in make.conf, no luck with either. The bottom line is ftp/curl with default port options does not want to build against openssl or libressl from ports. And it doesn't want to try and use the base openssl either. > > Your point about the port options for http2 requiring the ports version of openssl is valid. But this happens when the default options for both ports are used. I could accept my manual workaround if I had changed the default port options on either of the two ports. But default port options should build together. > > I suppose this has only come about on this upgrade cycle because nginx port now has http2 on by default? As of version 1.10.0 it appears http2 is selected by default. It has been the default in www/nginx-devel for some time. it is not the default for ftp/curl: OPTIONS_DEFAULT= CA_BUNDLE COOKIES OPENSSL PROXY RESOLV THREADED_RESOLVER TLS_SRP My /etc/make.conf has the following: WITH_OPENSSL_PORT=yes That will force ftp/curl (and all ports) to build against the openssl port. If I understand correctly, that is about to become the default behavior for all ports at some time in the not so distant future, or at least it has been proposed. > >>> >>> >>>> On Thursday, July 14, 2016 23:30 SGT, "Euan Thoms" wrote: >>>> >>>> I just tried to update my www/sogo2 jail and I now have ports breakage. >>>> >>>> The first thing that happened is that "portmaster -Rad" failed on ftp/curl with the following message: >>>> >>>> """ >>>> ===> Cleaning for curl-7.49.1 >>>> You have a /usr/local/lib/libcrypto.so file installed, but the framework is unable >>>> to determine what port it comes from. >>>> Add DEFAULT_VERSIONS+=ssl= to your /etc/make.conf and try again. >>>> *** Error code 1 >>>> >>>> Stop. >>>> make[1]: stopped in /usr/ports/ftp/curl >>>> *** Error code 1 >>>> >>>> Stop. >>>> make: stopped in /usr/ports/ftp/curl >>>> >>>> ===>>> make build failed for ftp/curl >>>> ===>>> Aborting update >>>> >>>> ===>>> Update for curl-7.48.0_2 failed >>>> ===>>> Aborting update >>>> """ >>>> >>>> It seems that ftp/curl can't build with openssl or libressl installed from ports. And www/nginx will only build with openssl or libresll installed from ports. So basically nginx and curl can't co-exist on the same host/jail. >>>> >>>> My port options are almost all the defaults, and I don't want to set anything in /etc/make.conf, but even if I do set DEFAULT_VERSIONS+=ssl=ssl I can't get curl to build. >>>> >>>> I've been updating this jail regulary for a while now without any issue. This reminds me hair-pulling in the past with the Kerberos fork issues (MIT vs Heimdal). And I was finding ports management so easy these days, until today. >>>> >>>> Why can't curl just use openssl from base, despite the port version being installed? >>>> >>>> >>>> >>>> # uname -a >>>> FreeBSD sogo.potensol.com 10.1-RELEASE-p16 FreeBSD 10.1-RELEASE-p16 #0: Tue Jul 28 12:04:19 UTC 2015 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 >> > > > > -- Jim Ohlstein "Never argue with a fool, onlookers may not be able to tell the difference." - Mark Twain