From owner-freebsd-ports@FreeBSD.ORG Sat May 9 11:21:47 2015 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 470858D9 for ; Sat, 9 May 2015 11:21:47 +0000 (UTC) Received: from smtp-auth.serv.Uni-Osnabrueck.DE (vm135.rz.uni-osnabrueck.de [131.173.16.10]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C14281A69 for ; Sat, 9 May 2015 11:21:45 +0000 (UTC) Received: from spock.drpetervoigt.private (p5DC4C58C.dip0.t-ipconnect.de [93.196.197.140]) (authenticated bits=0) by smtp-auth.serv.Uni-Osnabrueck.DE (8.13.8/8.13.8) with ESMTP id t49AumHu009029 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sat, 9 May 2015 12:56:49 +0200 Received: from kirk.drpetervoigt.private (kirk.drpetervoigt.private [192.168.1.60]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: pvoigt) by spock.drpetervoigt.private (Postfix) with ESMTPSA id 22AA64A03344 for ; Sat, 9 May 2015 12:56:48 +0200 (CEST) Date: Sat, 9 May 2015 12:56:43 +0200 From: "Dr. Peter Voigt" To: freebsd-ports@freebsd.org Subject: www/firefox really depends on security/openssl? Message-ID: <20150509125643.0bda93e6@kirk.drpetervoigt.private> Organization: =?UTF-8?B?VW5pdmVyc2l0w6R0IE9zbmFicsO8Y2s=?= X-Mailer: Claws Mail 3.10.1 (GTK+ 2.24.23; x86_64-suse-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-PMX-Version: 6.0.0.2142326, Antispam-Engine: 2.7.2.2107409, Antispam-Data: 2015.5.9.104216 (Univ. Osnabrueck) X-PMX-Spam: Gauge=IIIIIIII, Probability=8%, Report= HTML_00_01 0.05, HTML_00_10 0.05, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_2000_2999 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, FROM_NAME_PHRASE 0, RDNS_POOLED 0, RDNS_SUSP 0, RDNS_SUSP_SPECIFIC 0, __ANY_URI 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __HAS_FROM 0, __HAS_MSGID 0, __HAS_X_MAILER 0, __INT_PROD_COMP 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __RDNS_POOLED_10 0, __SANE_MSGID 0, __STOCK_PHRASE_7 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_MAILTO 0, __URI_NO_PATH 0, __URI_NO_WWW 0, __URI_NS X-PMX-Spam-Level: IIIIIIII X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 May 2015 11:21:47 -0000 I am running 10.1-RELEASE (amd64). Due to problems with security/openssl https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198788 I recently rebuilt all ports against base openssl. Some weeks ago I detected that www/firefox no longer builds on my system. I have created a corresponding PR: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199404 I decided to temporarily do a binary install of firefox and attempted: # pkg install firefox Updating FreeBSD repository catalogue... Fetching meta.txz: 100% 944 B 0.9kB/s 00:01 Fetching packagesite.txz: 100% 5 MiB 1.8MB/s 00:03 Processing entries: 100% FreeBSD repository update completed. 23912 packages processed. Updating database digests format: 100% The following 2 package(s) will be affected (of 0 checked): New packages to be INSTALLED: firefox: 37.0.2_1,1 openssl: 1.0.2_1 The process will require 95 MiB more space. 38 MiB to be downloaded. Proceed with this action? [y/N]: N I am wondering, if www/firefox really depends on security/openssl. According to the following, it should not: # cd /usr/ports/www/firefox # make run-depends-list /usr/ports/accessibility/atk /usr/ports/audio/alsa-lib /usr/ports/audio/alsa-plugins /usr/ports/audio/libvorbis /usr/ports/audio/opus /usr/ports/audio/soundtouch /usr/ports/databases/sqlite3 /usr/ports/devel/dbus-glib /usr/ports/devel/desktop-file-utils /usr/ports/devel/glib20 /usr/ports/devel/icu /usr/ports/devel/libevent2 /usr/ports/devel/libffi /usr/ports/devel/nspr /usr/ports/graphics/cairo /usr/ports/graphics/graphite2 /usr/ports/graphics/jpeg /usr/ports/graphics/libGL /usr/ports/graphics/png /usr/ports/multimedia/gstreamer1-libav /usr/ports/multimedia/gstreamer1-plugins-good /usr/ports/multimedia/libv4l /usr/ports/multimedia/libvpx /usr/ports/print/harfbuzz /usr/ports/security/nss /usr/ports/textproc/hunspell /usr/ports/x11-toolkits/gtk20 /usr/ports/x11-toolkits/libXt /usr/ports/x11-toolkits/pango /usr/ports/x11/libXext /usr/ports/x11/libXrender /usr/ports/x11/pixman /usr/ports/x11/startup-notification What is wrong with my conclusions? I appreciate any hints on it. Regards, Peter