Date: Sun, 10 Aug 2025 06:01:49 -0700 From: Cy Schubert <Cy.Schubert@cschubert.com> To: Cy Schubert <Cy.Schubert@cschubert.com>, "Enji Cooper (yaneurabeya)" <yaneurabeya@gmail.com>, Ian FREISLICH <ianfreislich@gmail.com>, FreeBSD Current <current@freebsd.org>, Pierre Pronchery <khorben@defora.org> Subject: Re: OpenSSL legacy provider is broken Message-ID: <20250810130149.770FC158@slippy.cwsent.com> In-Reply-To: <aJiDZ6w1Od82CYzj@freefall.freebsd.org> References: <b3f09f1b-e946-4bf1-822d-243dcd0dcd02@gmail.com> <B43DA54A-0017-42CA-A1FE-15F28048FEF0@gmail.com> <20250810060606.CD0DF147@slippy.cwsent.com> <aJiDZ6w1Od82CYzj@freefall.freebsd.org>
index | next in thread | previous in thread | raw e-mail
In message <aJiDZ6w1Od82CYzj@freefall.freebsd.org>, Lexi Winter writes: > > > --Q2wvLRJhf1H6uSmE > Content-Type: text/plain; charset=us-ascii > Content-Disposition: inline > Content-Transfer-Encoding: quoted-printable > > Cy Schubert: > > This looks like it's due to MIT KRB5 in 15. The HEIMDAL option needs to b= > e=20 > > replaced with a BASE option and BASE should test for MIT KRB5 or HEIMDAL = > by=20 > > looking at which kdc (kdc for Heimdal or krb5kdc for MIT) is installed. > > no, don't do that: the kdc is an optional component that may not be > installed when building ports, so you can't distinguish between base > Kerberos versions that way. > > see https://reviews.freebsd.org/D51841 for a better way to do this. Sorry, I didn't see that revision. I committed e38b33060387 last night after a couple of poudriere build failures here. -- Cheers, Cy Schubert <Cy.Schubert@cschubert.com> FreeBSD UNIX: <cy@FreeBSD.org> Web: https://FreeBSD.org NTP: <cy@nwtime.org> Web: https://nwtime.org e**(i*pi)+1=0home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20250810130149.770FC158>