From owner-svn-ports-head@freebsd.org Wed Apr 12 08:33:50 2017 Return-Path: Delivered-To: svn-ports-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BDE9FD38072; Wed, 12 Apr 2017 08:33:50 +0000 (UTC) (envelope-from brnrd@FreeBSD.org) Received: from smtp02.qsp.nl (smtp02.qsp.nl [193.254.214.163]) by mx1.freebsd.org (Postfix) with ESMTP id 53A8620B; Wed, 12 Apr 2017 08:33:50 +0000 (UTC) (envelope-from brnrd@FreeBSD.org) Received: from smtp02.qsp.nl (localhost [127.0.0.1]) by smtp02.qsp.nl (Postfix) with ESMTP id 4C7CBFD06C; Wed, 12 Apr 2017 10:26:13 +0200 (CEST) Received: from mail.brnrd.eu (unknown [193.164.217.85]) by smtp02.qsp.nl (Postfix) with ESMTP; Wed, 12 Apr 2017 10:26:13 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=brnrd.eu; h=date:from:to:subject:message-id; s=default; bh=e2OdhTCz1zBed7IbEvuBe6CInOuf1950rOEaX7JnPO4=; b=n47uHKhfe7nW2CxkM9pR/h/XDqqDQFgYXFka/cZ9VJN/+QtZWA5JtOW0txe/yJzcrd+LrviStvgiXMNedT8WXBeHyy37CvzCW5qBMN+XAVjWtIz+0gxs2hQHVCWob7OqYXlQWb5iIzSu/SffLaBTzPx2rSxwY3FUDUIjCrOiAtrAjfCdaFPTczQHxm0lC/Qv/CvPrlANqMZzE3YSteaAXYlsOzw8JxFc/UdDrvdMI3TW3tUfIQO5VnylRUc1iHr8xDX3xC/j9s/7j3cfPKr+4i9dzTDXaxvuQr33IP8AEIE0eyL178OT3iUaUjPWYV55YReQ+YZQcdY3dGlnvRoEHA== Received: from mail.bachfreund.nl (http.brnrd.eu [172.17.2.8]) by bachfreund.nl (OpenSMTPD) with ESMTPSA id d183ed52 TLS version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO; Wed, 12 Apr 2017 10:26:12 +0200 (CEST) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Date: Wed, 12 Apr 2017 10:26:12 +0200 From: Bernard Spil To: Ben Woods Cc: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org, Mathieu Arnold Subject: Re: svn commit: r438307 - in head: . security/libressl In-Reply-To: <3d3a826a-45d1-dff8-e913-8111e71e8b7a@mat.cc> References: <201704111901.v3BJ1Ykc091596@repo.freebsd.org> <3d3a826a-45d1-dff8-e913-8111e71e8b7a@mat.cc> Message-ID: X-Sender: brnrd@FreeBSD.org User-Agent: Roundcube Webmail/1.2.4 X-Virus-Scanned: clamav at smtp02 X-BeenThere: svn-ports-head@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: SVN commit messages for the ports tree for head List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Apr 2017 08:33:50 -0000 On 2017-04-12 8:29, Mathieu Arnold wrote: > Le 12/04/2017 à 00:48, Ben Woods a écrit : >> On Wed, 12 Apr 2017 at 3:01 am, Bernard Spil > > wrote: >> >> Author: brnrd >> Date: Tue Apr 11 19:01:34 2017 >> New Revision: 438307 >> URL: https://svnweb.freebsd.org/changeset/ports/438307 >> >> Log: >> security/libressl: Update to 2.5.3 >> >> - Update to 2.5.3 >> - Bump shlib versions >> - Add UPDATING entry for shlib version bumps >> - Use --enable-nc configure arg >> - Align with CFLAGS from -devel >> - Remove commented EXPLICIT_BZERO blurb >> - Update pkg-plist >> - Add x25519, drop krb5_asn header >> - Add ocspcheck binary >> - Added/removed man-pages >> >> Modified: >> head/UPDATING >> head/security/libressl/Makefile >> head/security/libressl/distinfo >> head/security/libressl/pkg-plist >> head/security/libressl/version.mk >> >> Modified: head/UPDATING >> >> ============================================================================== >> --- head/UPDATING Tue Apr 11 18:58:18 2017 (r438306) >> +++ head/UPDATING Tue Apr 11 19:01:34 2017 (r438307) >> @@ -5,6 +5,30 @@ they are unavoidable. >> You should get into the habit of checking this file for changes >> each time >> you update your ports collection, before attempting any port >> upgrades. >> >> +20170411: >> + AFFECTS: users of security/libressl >> + AUTHOR: brnrd@FreeBSD.org >> + >> + The port has been updated to the latest stable version 2.5 of >> LibreSSL. >> + The shared library versions of the libraries have been bumped. >> + >> + After upgrading, manually update all packages that depend on >> any of the >> + libraries provided by LibreSSL (libssl, libcrypto and libtls) >> since the >> + versions of these libraries have changed. Normally, you can >> obtain the >> + list of dependent software by running the following command: >> + >> + # pkg info -r libressl >> + >> + Then you should rebuild all ports depending on libressl to >> avoid dangling >> + shared library dependencies. Poudriere and pkg handle this >> correctly, >> + portmaster and portupgrade users can use the following to >> rebuild all >> + dependent ports. >> + >> + Portmaster users: >> + portmaster -r libressl >> + Portupgrade users: >> + portupgrade -fr security/libressl >> + >> 20170410: >> AFFECTS: users of x11-wm/awesome >> AUTHOR: garga@FreeBSD.org >> >> >> >> Hi Bernard, >> >> I thought the normal practice was for the commit to also bump the >> PORTREVISION for all ports that depend on the one that has changed, to >> ensure users of portmaster and portupgrade automatically rebuild all >> dependent ports? > > It is not always feasible to do so, libressl is not the default, and > there are *many* ports that depends on it through USES=ssl. Hi Ben, There are currently no ports that have a runtime dependency on LibreSSL. Both security/acme-client as well as net/openntpd use statically linked libtls. www/obhttpd is the exception but forces a user to switch to default SSL=libressl and not via a DEPENDS. Cheers, Bernard.