Date: Mon, 4 Oct 2021 20:20:33 +0200 From: Mathieu Arnold <mat@freebsd.org> To: freebsd-ports@freebsd.org Subject: Re: State of LibreSSL in FreeBSD ports Message-ID: <20211004182033.7iaeak3z2dgwdbhw@aching.in.mat.cc> In-Reply-To: <20211003141654.bwlnlin6g3s2n5gt@nexus.home.palmen-it.de> References: <20211003141654.bwlnlin6g3s2n5gt@nexus.home.palmen-it.de>
next in thread | previous in thread | raw e-mail | index | archive | help
--ylm3ubk7nj6fxpsc Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Oct 03, 2021 at 04:16:54PM +0200, Felix Palmen wrote: > Is LibreSSL in FreeBSD ports >=20 > * supported, so ports should build with it if at all possible? > * supported on a "best effort" base, so setting a port BROKEN is > acceptable if maintaining (working) patches would be too much hassle? > * NOT supported at all, so random build failures with LibreSSL are fine? I'd say the third option, the only *SSL variant that is guaranteed too work is using the base system OpenSSL, using anything else is bound to hurt and segfault at one point or the other. This is because your software will have linking with one library from the base system that brings OpenSSL, and some other library that links with ports OpenSSL or LibreSSL, and the software calls one function that is in both. At that point, it is a variant of the russian roulette, but with about a half and half chance of the function called being resolved to the wrong library. --=20 Mathieu Arnold --ylm3ubk7nj6fxpsc Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEVhwchfRfuV0unqO5KesJApEdfgIFAmFbReFfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDU2 MUMxQzg1RjQ1RkI5NUQyRTlFQTNCOTI5RUIwOTAyOTExRDdFMDIACgkQKesJApEd fgJ2KA/+OsSxe4EEWWhbpst/BzG3VlgYfFJw97WqzuvuhjkzxQ1YfIGq23DyHSWX yBqqJsJjf0K7f7w+LChVJcHNpNGuIuUZWcwiclprVV3d+p8MGHvGecXpHytbdbGg mqtmJLqhyiVMgJG/eCZ70OlWI07d9IwedVpjWAUB+kRyJMaA8t0LGD8HbRUSZhbr nV1oLSQasHC7zVYmz71c0AgVWppmqqYbTNHSeXoAPdModxbktKOQUoD5/RFM+Ei8 BwsV6VbHeKtm39iimXQq99OpW3scwsJbK8+pv8tdAHZ7AFTcOduq+9Un5HXNhM0j b+ul45p721rp/16nKz56DtMO/uZmqZB1TH/8JzNxOrY05Ew6ZXtHNAYzmIhjMuiX EBZUcYFah8GmgaAANZCUyjTkrXbtbBWVA5c8sFuLzHZqa8INxfdzNXaUMdQdyZhq zoVhh2ds3ZZUx1ko8WgMXbHGXnZp8zw2VAOrO0cZ7v9apsxp+qYxZsBI55QeNwnH 083rmN3FGPOHROxGryEwhckr5y9LuaGexQeE0/HQjMwTI2/JeqMRSkpb9DmCycpU +N86mq7o70K4PE7iG4nluiI/s+A7+mVuxQ8xrX4dBX0kaDWLjoWU54CLV/kuxYHO E8xJ/RpSewvEM4nYuF3cr1+L7UxZnCmTprzATSoxtugbEdTsXCg= =B0WT -----END PGP SIGNATURE----- --ylm3ubk7nj6fxpsc--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20211004182033.7iaeak3z2dgwdbhw>