From nobody Mon Oct 16 11:16:13 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4S8F0v30grz4xFmC for ; Mon, 16 Oct 2023 11:16:15 +0000 (UTC) (envelope-from madpilot@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4S8F0v1LWDz3TXQ; Mon, 16 Oct 2023 11:16:15 +0000 (UTC) (envelope-from madpilot@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1697454975; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=s1mZcf/P0+yCrf7GyR2oLFBCY86pZw5XpqtgGFuOZAk=; b=SauknpcTK42Rc5HbSja5YsYrP99FtJKI9BHosk9/7o4dJJYdafOAml0N4UPVqknQp5wMst P9ZM4rPMWMAy56zrDFwpsvUsrPrTvdrDYpKSB4o0t3GZhxWOPdRKt7a+3zg791qmJqmWnv Yqetl2U/B6oJFE5+psKACr02TGUgclZkubH6D5edqapUWNcFLp5xUHv3J3iA/Za3c+uoZx UcbxKyeKVKcc4CMBBFJnZ+jA1wzoyzOK74gqKMAye/7XEETWLWyXg6F3RKvDkHrIJ18ca9 MZNVNf1pbfaXzH+peyW1N4El+Fwx4hLnQ3r3i//l1dgwe56Y/UOXbO7P5A0dIw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1697454975; a=rsa-sha256; cv=none; b=w2JkEM4r+3z0rdW+de6zOzecr/Kwfp+efVIRKO8qAWhUI0RusueMkjPlhnq/GgGzV1srsm mCyyGxDWovN6WlLDU+Ctc8h8hjFPuo+cdvaQfbnvv2uH4qZ6fx446N6z8kmXUsKhicHdNE K7hpyIMaqGmlpOlMLmrlcEnXfr4quNCboJk7hMF8lbu0qyN91HnmjY47dgMJ0T1UR0GAKN LNGU65ng4/e7m1VEN6qTLItYuBfuFvUGkiowHpk+tqFz7mCxDtmRiU8KkPpQUzqolsn2wn I8XdcY8EJBwh4I25SSqzGx1MznKxT5M8ATK2hkOm3qNMjzehn0MRdqu/zmj/zg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1697454975; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=s1mZcf/P0+yCrf7GyR2oLFBCY86pZw5XpqtgGFuOZAk=; b=vxIcKL4l0ILFcBXLGwodbmHPTIyEmLVYB5oG7fwtKzdg4wHtwTTP33L1PICzQtiSzIzDW/ 7Lu7K2okswebF7nQn8iseb7WhQtd2OjsWTJt3Fv5BNlP6WGmNqriVUiXHlNoepcXSQbeCQ MiBzHhdGGhw7M6jCNMgpyevlO5oV9JTC316docQ45R00pKk4K+3zSbEBNy1aJTGzJ31ZQZ Wgb0K/cdXCBMaTLDAb+6SZrr/98SIUpFhG/FYPsf5haaEhNLv+uN0SGK1ruEDSdnCDsW28 G5xvjRdm+VZnSiuYaO9Q5dGxZHEuhD38iyr6i7nd+7O4Et9Gln1VETpCzXzPzQ== Received: from [IPV6:2a01:e11:2002:4280::13:1] (unknown [IPv6:2a01:e11:2002:4280::13:1]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: madpilot/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4S8F0t5Bn6z9Sb; Mon, 16 Oct 2023 11:16:14 +0000 (UTC) (envelope-from madpilot@FreeBSD.org) Message-ID: <32bd1911-5d67-426f-b9ce-523fad1849d1@FreeBSD.org> Date: Mon, 16 Oct 2023 13:16:13 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: HEADS-UP: security/openssl switching to 3.0 branch Content-Language: en-US, it From: Guido Falsi To: DutchDaemon - FreeBSD Forums Administrator , ports@freebsd.org References: <92667a5ea6afeab7ce9c55528af34f49@freebsd.org> <48b835a442707d7b8db4f4b270c12897@freebsd.org> <3aa783ad-4318-4c9a-bb1a-1065ce3a91cf@FreeBSD.org> <8fa8e262-26ed-4094-87d1-8379d7a61e19@FreeBSD.org> <4f470a05-8085-4157-9f1e-ac6ca7fe9aaa@FreeBSD.org> <813ee5d3-781e-43dc-8acb-fb4d546780fe@FreeBSD.org> <87f39de3-2c91-479c-b964-fb9dcde1df2c@FreeBSD.org> In-Reply-To: <87f39de3-2c91-479c-b964-fb9dcde1df2c@FreeBSD.org> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit On 16/10/23 13:13, Guido Falsi wrote: > On 16/10/23 13:09, DutchDaemon - FreeBSD Forums Administrator wrote: >> On 16/10/2023 13:07, Guido Falsi wrote: >>> On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: >>>> On 16/10/2023 12:57, Guido Falsi wrote: >>>>> On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: >>>>>> I found this one after a full rebuild in Poudriere: >>>>>> >>>>>> ld-elf.so.1: Shared object "libssl.so.11" not found, required by >>>>>> "transmission-daemon" >>>>>> >>>>> >>>>> I guess you will need to force rebuild/reinstall all packages >>>>> depending on openssl. >>>>> >>>>> (if I understand correctly you're using poudriere-bulk(8) to build >>>>> yout binary packages repo) >>>>> >>>>> Actually poudriere should have been able to rebuild them itself, >>>>> unless you're using the -S option, which could have skipped some >>>>> rebuilds that in this case are needed. >>>>> >>>>> If you have a broken repo (due to -S or some other unknown reason) >>>>> you will need to rebuild it from scratch (-c option) to get a >>>>> pristine and hopefully working one. >>>>> >>>> This is Poudriere, everything was rebuilt from the ground up. >>>> >>> >>> I see, but you did not report, did you "pkg upgrade -f" everything >>> depending on openssl? I'm not sure pkg will figure it out by itself >>> that it needs to do that in your case. >>> >>> It looks like you still have old binaries on your system. If >>> poudriere did end the build them all successfully it would be strange >>> it would have generated so many non working binaries without >>> experiencing failures during the build. >>> >> >> pkg upgrade -fy && service -R on the hosts; this is not my 1st, or >> even 100th rodeo.. >> > > I have tried to be helpful and failed. Sorry. Let me elaborate on this. I've always been using OpenSSL provieded by base, so I have little experience with using OpenSSL from ports (which, if I understand correctly is what you are doing). So I cannot give specific advice on that setup and was just guessing what you could do. Really hope someone with experience in configurations similar to yours will be able to help you better. -- Guido Falsi