From owner-freebsd-security@FreeBSD.ORG Thu May 1 10:03:01 2014 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 47474879; Thu, 1 May 2014 10:03:01 +0000 (UTC) Received: from c01.escapebox.net (c01.escapebox.net [87.230.55.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EFD47172B; Thu, 1 May 2014 10:03:00 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=geminix.org; s=g01; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:References:Subject:CC:To:MIME-Version:From:Date:Message-ID; bh=KqYFwqowYwBMm8WhtbX/GCNznvHY2iz5jdBwjzm2wlI=; b=GFJfl2p25cBVGO1GervDyO53ay8moSFdcJZv4IVo6ogoCZ4wq2yXh+FtSJHaRxAhekkLS5MeLa2+AfMB2KGV87gpvvhORLd5TWFs+KbNFdwmEM7SfQdSzNKEn8jZ8RkRan3QT1rQLM2BuOjWN6pT9urzZpnwtKT1cFJyeyBzTXs=; Received: from user.n01.escapebox.net ([fd45:7d86:a5ba::3b] ident=mailnull) by repo.n01.escapebox.net with esmtp (Exim 4.82 (FreeBSD)) (envelope-from ) id 1WfnpR-000364-Kj; Thu, 01 May 2014 12:02:57 +0200 Message-ID: <53621BE0.4040704@geminix.org> Date: Thu, 01 May 2014 12:03:12 +0200 From: Uwe Doering Organization: Private UNIX Site User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: freebsd-security@freebsd.org Subject: Re: ports requiring OpenSSL not honouring OpenSSL from ports References: <201404271508.s3RF8sMA014085@catnip.dyslexicfish.net> <201404272250.s3RMo2NZ095771@catnip.dyslexicfish.net> <445CDD31-5A11-4F5E-92DE-CB11A10E9BDE@odo.in-berlin.de> <5361896C.7010703@bluerosetech.com> In-Reply-To: <5361896C.7010703@bluerosetech.com> X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Received: from gemini by user.n01.escapebox.net with esmtpa (Exim 4.82 (FreeBSD)) (envelope-from ) id 1WfnpR-00035z-Hs; Thu, 01 May 2014 12:02:57 +0200 Cc: "freebsd-ports@freebsd.org" X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 May 2014 10:03:01 -0000 On 01.05.14 01:38, Darren Pilgrim wrote: > On 4/30/2014 12:48 PM, Michael Grimm wrote: >> [CC'd to freebsd-ports] >> >> On 28.04.2014, at 00:50, Jamie Landeg-Jones >> wrote: >>> Scot Hetzel wrote: >> >>> Here's a list of some that link against /lib/libcrypto.so.7 and/or >>> /lib/libssl.so.7 >> [...] >>> devel/android-tools-adb >>> net-p2p/transmission-cli >>> net-p2p/transmission-daemon >>> net/socat >>> net/svnup >>> ports-mgmt/pkg >>> security/john >>> security/scrypt >>> security/trousers >>> sysutils/tarsnap >> >> + www/nginx > > Nginx respects WITH_OPENSSL_PORT. I indeed wondered why this variable hadn't been mentioned so far. Guys, you do have "WITH_OPENSSL_PORT=yes" in your "/etc/make.conf", haven't you? Because otherwise the whole thread might be considered a false alert. The ports system does not link with the ports' OpenSSL of its own accord. Or at least not in a reliable/predictable manner. You have to explicitly tell it what you want. Best regards, Uwe -- Uwe Doering | EscapeBox - IT Consulting gemini@geminix.org | http://www.escapebox.net