Date: Sat, 07 Nov 2015 20:14:46 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 204368] [patch] comms/kermit: disable OpenSSL version checks after FreeBSD 10 Message-ID: <bug-204368-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=204368 Bug ID: 204368 Summary: [patch] comms/kermit: disable OpenSSL version checks after FreeBSD 10 Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Keywords: patch Severity: Affects Only Me Priority: --- Component: Individual Port(s) Assignee: danfe@FreeBSD.org Reporter: olgeni@FreeBSD.org Assignee: danfe@FreeBSD.org Flags: maintainer-feedback?(danfe@FreeBSD.org) Keywords: patch Created attachment 162887 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=162887&action=edit patch to disable SSL version check The kermit command shows the following message when it is built in a jail with a different minor revision of OpenSSL: ?OpenSSL libraries do not match required version: . C-Kermit built with OpenSSL 1.0.1i-freebsd 6 Aug 2014 . Version found OpenSSL 1.0.1p-freebsd 9 Jul 2015 OpenSSL versions prior to 1.0.0 must be the same. Rebuild C-Kermit from source on this computer to make versions agree. C-Kermit makefile target: freebsd+ssl Or if that is what you did then try to find out why the program loader (image activator) is choosing a different OpenSSL library than the one specified in the build. All SSL/TLS features disabled. According to a comment in ck_ssl.c this check is not needed after version 1.0.0: OpenSSL does not provide for ABI compatibility between releases prior to version 1.0.0. If the version does not match, it is not safe to assume that any function you call takes the same parameters or does the same thing with them. Removing this test prior to the OpenSSL 1.0.0 release will result in an increase in unexplained or incorrect behaviors. The test should be revised once OpenSSL 1.0.0 is released and we see what its claims are as to ABI compatibility. I made a small patch to disable the check on FreeBSD >= 10.0, so now SSL support can be used on binary packages built on different jail revisions. -- You are receiving this mail because: You are the assignee for the bug.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-204368-13>