From owner-freebsd-ports-bugs@FreeBSD.ORG Sun Apr 1 18:40:13 2012 Return-Path: Delivered-To: freebsd-ports-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 389DF106566B for ; Sun, 1 Apr 2012 18:40:13 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 10A9C8FC15 for ; Sun, 1 Apr 2012 18:40:13 +0000 (UTC) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.5/8.14.5) with ESMTP id q31IeCg2093710 for ; Sun, 1 Apr 2012 18:40:12 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.5/8.14.5/Submit) id q31IeCZ0093709; Sun, 1 Apr 2012 18:40:12 GMT (envelope-from gnats) Resent-Date: Sun, 1 Apr 2012 18:40:12 GMT Resent-Message-Id: <201204011840.q31IeCZ0093709@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-ports-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Eugene Grosbein Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 14815106566C for ; Sun, 1 Apr 2012 18:34:39 +0000 (UTC) (envelope-from eugen@grosbein.pp.ru) Received: from grosbein.pp.ru (grosbein.pp.ru [89.189.172.146]) by mx1.freebsd.org (Postfix) with ESMTP id C7D2F8FC1E for ; Sun, 1 Apr 2012 18:34:36 +0000 (UTC) Received: from grosbein.pp.ru (localhost [127.0.0.1]) by grosbein.pp.ru (8.14.5/8.14.5) with ESMTP id q31IYSH5003500 for ; Mon, 2 Apr 2012 01:34:28 +0700 (NOVT) (envelope-from eugen@grosbein.pp.ru) Received: (from eugen@localhost) by grosbein.pp.ru (8.14.5/8.14.5/Submit) id q31IYSEe003499; Mon, 2 Apr 2012 01:34:28 +0700 (NOVT) (envelope-from eugen) Message-Id: <201204011834.q31IYSEe003499@grosbein.pp.ru> Date: Mon, 2 Apr 2012 01:34:28 +0700 (NOVT) From: Eugene Grosbein To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: ports/166561: [patch] ports-mgmt/portaudit should be able to use ports openssl(1) X-BeenThere: freebsd-ports-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Eugene Grosbein List-Id: Ports bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 01 Apr 2012 18:40:13 -0000 >Number: 166561 >Category: ports >Synopsis: [patch] ports-mgmt/portaudit should be able to use ports openssl(1) >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Sun Apr 01 18:40:12 UTC 2012 >Closed-Date: >Last-Modified: >Originator: Eugene Grosbein >Release: FreeBSD 8.3-PRERELEASE amd64 >Organization: RDTC JSC >Environment: System: FreeBSD grosbein.pp.ru 8.3-PRERELEASE FreeBSD 8.3-PRERELEASE #19: Tue Mar 20 03:24:04 NOVT 2012 root@grosbein.pp.ru:/usr/local/obj/usr/local/src/sys/DADV amd64 >Description: Sometimes, one may install openssl from ports without overwriting base system stock openssl. portaudit should have an option to make it use /usr/local/bin/openssl instead of /usr/bin/openssl. Let it recognise new option named "portaudit_openssl" in its /usr/local/etc/portaudit.conf and use provided openssl(1) path. >How-To-Repeat: N/A >Fix: diff -urN portaudit.orig/files/portaudit-cmd.sh portaudit/files/portaudit-cmd.sh --- portaudit.orig/files/portaudit-cmd.sh 2012-04-02 00:09:31.000000000 +0700 +++ portaudit/files/portaudit-cmd.sh 2012-04-02 01:25:56.000000000 +0700 @@ -52,6 +52,7 @@ : ${portaudit_pubkey:="%%PREFIX%%/etc/portaudit.pubkey"} : ${portaudit_fixed=""} + : ${portaudit_openssl:="/usr/bin/openssl"} } extract_auditfile_raw() @@ -78,10 +79,10 @@ local TMPFILE=`mktemp -t portaudit` extract_auditfile_raw | egrep "^#SIGNATURE: " | sed "s/^#SIGNATURE: //g" \ - | openssl enc -d -a >$TMPFILE + | $portaudit_openssl enc -d -a >$TMPFILE signatureresult=`extract_auditfile_raw | egrep -v "^#SIGNATURE: " \ | egrep -v "^#CHECKSUM: " \ - | openssl dgst -sha256 -verify ${portaudit_pubkey} -signature $TMPFILE` + | $portaudit_openssl dgst -sha256 -verify ${portaudit_pubkey} -signature $TMPFILE` if [ -n "$TMPFILE" ]; then rm "$TMPFILE" fi >Release-Note: >Audit-Trail: >Unformatted: