Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 24 Oct 2007 07:02:33 +0100
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        White Hat <pigskin_referee@yahoo.com>
Cc:        FreeBSD Users Questions <freebsd-questions@freebsd.org>
Subject:   Re: Using OpenSSL from ports
Message-ID:  <471EDFF9.9070205@infracaninophile.co.uk>
In-Reply-To: <140449.26446.qm@web34409.mail.mud.yahoo.com>
References:  <140449.26446.qm@web34409.mail.mud.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

White Hat wrote:
> Is there any real advantage to installing 'openssl'
> from ports rather than using the version installed in
> the base system? Other than the fact that the port
> version is slightly newer, is there any other major
> difference?

For RELENG_6 and earlier, you will need the ports version
of openssl in order to use rsa-sha256.  Some ported software
needs that (eg. mail/dkim-milter).  Otherwise there isn't
any great advantage either way.  RELENG_7 and above are
close to up-to-date already (version 0.9.8e rather than
0.9.8f) and support all the latest ciphers.

> Also, if I did install the port version, how would I
> insure that applications would use it as opposed to to
> the version in the base system?

Put:

WITH_OPENSSL_PORT=      yes

into /etc/make.conf

	Cheers,

	Matthew

- -- 
Dr Matthew J Seaman MA, D.Phil.                   7 Priory Courtyard
                                                  Flat 3
PGP: http://www.infracaninophile.co.uk/pgpkey     Ramsgate
                                                  Kent, CT11 9PW
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (FreeBSD)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHHt/58Mjk52CukIwRCNdOAJ9SOnjo27xBh9i0mUglDx465gvSDACeMrnx
URkoYyIavOWzDkXNYvBj/UM=
=qPbX
-----END PGP SIGNATURE-----



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?471EDFF9.9070205>