Date: Fri, 10 Apr 2015 00:49:39 +0200 From: Baptiste Daroussin <bapt@FreeBSD.org> To: Warren Block <wblock@wonkity.com> Cc: Matthew Seaman <matthew@freebsd.org>, freebsd-ports@freebsd.org Subject: Re: LibreSSL infects ports, causes problems Message-ID: <20150409224939.GV95321@ivaldir.etoilebsd.net> In-Reply-To: <alpine.BSF.2.20.1504091513500.1276@wonkity.com> References: <slrnmib1ur.2jau.naddy@lorvorc.mips.inka.de> <5525E609.70402@FreeBSD.org> <20150409115942.GA81282@lorvorc.mips.inka.de> <20150409130521.GQ95321@ivaldir.etoilebsd.net> <20150409155345.GA87497@lorvorc.mips.inka.de> <20150409155649.GT95321@ivaldir.etoilebsd.net> <CAOp4FwS6%2BwkO1OPom5W6u6RHPNQaLXiyF-tR20Sq4=dyMV%2BcXw@mail.gmail.com> <20150409161407.GU95321@ivaldir.etoilebsd.net> <5526A82E.3070609@freebsd.org> <alpine.BSF.2.20.1504091513500.1276@wonkity.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--MLcyhLwX/7AHNQNx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Apr 09, 2015 at 03:17:09PM -0600, Warren Block wrote: > On Thu, 9 Apr 2015, Matthew Seaman wrote: >=20 > > On 04/09/15 17:14, Baptiste Daroussin wrote: > >> For now candidates are: > >> libarchive > >> ncurses > >> readline (which will have then to be linked to ports ncurses and not b= ase > >> version through the magic of fake libtermcap) > >> openssl > >> libedit(?) > >> > > > > One I noticed recently was in ftp/curl -- if you're using the ports > > version of OpenSSL you also have to use one of the ports versions of > > GSSAPI -- GSSAPI_HEIMDAL or GSSAPI_MIT, or else GSSAPI_NONE. > > Otherwise you can end up with two different SSL shlibs linked into the > > same binary. >=20 > That broke VirtualBox with some very weird and inconsistent symptoms: > https://lists.freebsd.org/pipermail/freebsd-emulation/2015-March/012402.h= tml Yup some people will probably be unhappy to see new dependencies for those things, but that would for sure solve a lot more problem than it causes and makes life easier for all maintainers. Best regards, Bapt --MLcyhLwX/7AHNQNx Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlUnAgMACgkQ8kTtMUmk6EzFNQCfaYnb/ztoW9t+jmNvz0fJAHRJ zPUAn2vgJNbMja2oVaY2kSVRKRALu51E =l9aw -----END PGP SIGNATURE----- --MLcyhLwX/7AHNQNx--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150409224939.GV95321>