From owner-freebsd-current@freebsd.org Fri Oct 26 18:14:10 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0E9F610ED5D5 for ; Fri, 26 Oct 2018 18:14:10 +0000 (UTC) (envelope-from oleglelchuk@gmail.com) Received: from mail-io1-xd31.google.com (mail-io1-xd31.google.com [IPv6:2607:f8b0:4864:20::d31]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 881B88136C for ; Fri, 26 Oct 2018 18:14:09 +0000 (UTC) (envelope-from oleglelchuk@gmail.com) Received: by mail-io1-xd31.google.com with SMTP id q18-v6so1278499iod.5 for ; Fri, 26 Oct 2018 11:14:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=bTcWCnLMHtLb/x9PKFjHFsicQclufV8PdfFoMioZ1pk=; b=L0Ugs67VIM5UY3no2k6R8rwZ4FbhZa5IqlznQj2tfb4yNonJKF4o+JsWuP4lZziz77 Rt1DpKpwNhLJDW1ya6EwJKQKZ4Px4TyEr19cAq3xeyjloXdwVmlW+vh3AxJuWlVRvi+r QFaBlEgj4Q1WgbA9aAi+FHX3udzwXgO06zYXpPPPDJEpQAba0JhRa9+HUM8beWTqJoM6 45nO2QEsgSVxodB6BYZTOVd7ZI4PjKu1dka/Dd8YE/xVDOKuzdO8DjsRg5evq4yWjduM r/HYEc7S4GNUmpZm21WXLni3LyEVCKqBA5DrbFADFk/08OGHCxweYGNX9CsXK7izsmUS Rz5g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=bTcWCnLMHtLb/x9PKFjHFsicQclufV8PdfFoMioZ1pk=; b=PI8l8uQhUIn4mEZUh03YhNnzuvVzuwwygqSFEPPtUYk9czkzObf/V9GyLhFZQYKsS0 R5kJqFcBlxA1lFhvLcYZlX9EquTXRk3pAWH3g7cFJJ7DHOtC8Aihict1gYsxfoO8SVvC JcyPucxkOYY/KZ7YUyVoY2eZWp2Ja6T5PM9YsI72uizgbDQ9E22NbOhSbx6ZeuQa98Fa Eb5ou2jZtQvH2tGOzfdADMB4ZQLks7EDlJuEEKMCoRNwYvAOqi4Jv7lmEXXG57TxF2ik XCIIFKfdZLhyeCMR2BfksSSfz/J4SJpsrkN1AfGxgtvS3GHuiMQCmR8vBKrmgmGzm1zE ll5w== X-Gm-Message-State: AGRZ1gI4JdMBGxeD4kWZWG4GlvfMPcVAcXNMskpLjagWEc2Y2BXPQOvH NAk2KytIt5OS4sv4/Vi49zhUdGYGBg8t7l4Vi1fBbg== X-Google-Smtp-Source: AJdET5euY2Y3hWBqCkKYZcSEHaf85AAw5MMxa0LfOl2P43l2Nk85prgeFfP1nrqwpQOm0wmhao0lWKUhpDX5W0qzK6A= X-Received: by 2002:a6b:ba86:: with SMTP id k128-v6mr3048745iof.254.1540577648748; Fri, 26 Oct 2018 11:14:08 -0700 (PDT) MIME-Version: 1.0 References: <20181009213425.GG61558@FreeBSD.org> <346b8805-f4d3-dc90-c882-d72f640b6a5c@protected-networks.net> In-Reply-To: From: Oleg Lelchuk Date: Fri, 26 Oct 2018 14:13:57 -0400 Message-ID: Subject: Re: HEADS-UP: OpenSSL 1.1.1 in 12.0 To: ronald-lists@klop.ws Cc: freebsd-current@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Oct 2018 18:14:10 -0000 libtorrent still can't be built with the new openssl On Sat, Oct 13, 2018 at 4:40 AM Ronald Klop wrote: > On Sat, 13 Oct 2018 02:00:16 +0200, Don Lewis > wrote: > > > On 11 Oct, Don Lewis wrote: > >> On 11 Oct, Don Lewis wrote: > >>> On 11 Oct, freebsd.current@clogic.com.ua wrote: > >>>> On 2018-10-10 06:14, Michael Butler wrote: > >>>>> On 10/9/18 5:34 PM, Glen Barber wrote: > >>>>>> OpenSSL has been updated to version 1.1.1 as of r339270. > >>>>>> > >>>>>> It is important to rebuild third-party packages before running: > >>>>>> > >>>>>> # make -C /usr/src delete-old && make -C /usr/src delete-old-libs > >>>>>> > >>>>>> Thank you for your patience while this work was in progress, and > >>>>>> thank > >>>>>> you to all involved for their hard work in getting things ready for > >>>>>> this > >>>>>> update. > >>>>> > >>>>> So far, I've found two ports that will no longer build. They are: > >>>>> > >>>>> net-mgmt/net-snmp > >>>>> security/opencryptoki > >>>>> > >>>>> I simply chose those that were linked to /usr/lib/libssl.so.8 where > >>>>> the > >>>>> openssl update creates libssl.so.9. There may be more I haven't found > >>>>> yet, > >>>>> > >>>>> imb > >>>> > >>>> You always can add DEFAULT_VERSIONS+=ssl=openssl to /etc/make.conf to > >>>> use openssl from ports. > >>>> Anyway, I think apps from ports need to use openssl from ports. > >>> > >>> I've been doing this for a long time, but I still see a fair amount of > >>> breakage with the new base OpenSSL. I suspect that some ports are > >>> incorrectly stumbling across the new bits in base even though they > >>> shouldn't be looking there. > >> > >> security/p5-Net-SSLeay is hardwired to use base OpenSSL, so changing the > >> default version can't be done to unbreak p5-IO-Socket-SSL. > >> > >> devel/libsoup appears to allow the OpenSSL version to be set, but > >> doesn't > >> have an option for GSSAPI, so it attempts to use base GSSAPI with ports > >> OpenSSL which is not a valid combo. > >> > >> emulators/virtualbox-ose is hardwired to use base OpenSSL. > > > > I now think the problem with virtualbox-ose is not the port. Rather it > > is the fact that that the base libssl.so and the libssl.so installed by > > the security/openssl have the same shared library version number even > > though they are radically different OpenSSL versions. > > > I added this to libmap.conf: > cat /etc/libmap.conf > # $FreeBSD: head/libexec/rtld-elf/libmap.conf 338741 2018-09-18 00:25:00Z > brd $ > includedir /usr/local/etc/libmap.d > libssl.so.8 libssl.so.9 > libcrypto.so.8 libcrypto.so.9 > > This made pkg run again. And now I'm waiting for the next pkg build to > run > pkg upgrade -f and upgrade everything. > I guess that will solve all issues. > > Ronald. > _______________________________________________ > freebsd-current@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org" >