Date: 23 Nov 2004 00:50:53 -0000 From: "freebsd@simplerezo.com" <freebsd@simplerezo.com> To: FreeBSD-gnats-submit@FreeBSD.org Cc: dinoex@FreeBSD.org Subject: ports/74275: bsd.openssl.mk Message-ID: <20041123005053.98304.qmail@xeon.ouestil.com> Resent-Message-ID: <200411230100.iAN10pM8074446@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 74275 >Category: ports >Synopsis: bsd.openssl.mk >Confidential: no >Severity: serious >Priority: high >Responsible: freebsd-ports-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Tue Nov 23 01:00:51 GMT 2004 >Closed-Date: >Last-Modified: >Originator: freebsd@simplerezo.com >Release: FreeBSD 4.9-RELEASE-p12 i386 >Organization: SimpleRezo [http://www.simplerezo.com] >Environment: System: FreeBSD devel.simplerezo.com 4.9-RELEASE-p12 FreeBSD 4.9-RELEASE-p12 #0: Sun Nov 7 15:23:05 CET 2004 root@devel.simplerezo.com:/usr/obj/usr/src/sys/KERNEL i386 All FreeBSD releases affected (ports related) >Description: bsd.openssl.mk, used by many ports, try to guess installed OpenSSL version by checking in opensslv.h for the variable OPENSSL_VERSION_TEXT since 0.9.7e, there are two lines contains the variable (w and w/o fips) unfortunaly, the first is the 0.9.7e-fips, and so the Mk script could not recognize openSSL version (looking for 0.9.7e) maintainer is cc'd >How-To-Repeat: install security/openssl (version 0.9.7e_1) >Fix: --- bsd-openssl.patch begins here --- --- Mk/bsd.openssl.mk.orig Tue Nov 23 01:20:42 2004 +++ Mk/bsd.openssl.mk Tue Nov 23 01:38:25 2004 @@ -51,7 +51,7 @@ exists(/usr/include/openssl/opensslv.h) # Security: version in base must be 0.9.7d or have fixes # http://www.freebsd.org/cgi/cvsweb.cgi/src/crypto/openssl/crypto/opensslv.h -OPENSSLVER!= ${AWK} '/OPENSSL_VERSION_TEXT/ { print $$4; exit }' \ +OPENSSLVER!= ${AWK} '/OPENSSL_VERSION_TEXT/ { sub(/-fips/, ""); print $$4; exit }' \ /usr/include/openssl/opensslv.h # check for safe versions in the base .if ${OPENSSLVER} != "0.9.7a-p1" && ${OPENSSLVER} != "0.9.7c-p1" && ${OPENSSLVER} != "0.9.7d" && ${OPENSSLVER} != "0.9.7e" --- bsd-openssl.patch ends here --- >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041123005053.98304.qmail>