From owner-freebsd-questions@freebsd.org Fri Jan 17 21:49:42 2020 Return-Path: Delivered-To: freebsd-questions@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 6439C1FBD8E for ; Fri, 17 Jan 2020 21:49:42 +0000 (UTC) (envelope-from clay.daniels.jr@gmail.com) Received: from mail-lf1-x143.google.com (mail-lf1-x143.google.com [IPv6:2a00:1450:4864:20::143]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 47zvqB20K2z48JH; Fri, 17 Jan 2020 21:49:42 +0000 (UTC) (envelope-from clay.daniels.jr@gmail.com) Received: by mail-lf1-x143.google.com with SMTP id 203so19444168lfa.12; Fri, 17 Jan 2020 13:49:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=wJGJiUYgfZjPHUoip+fYfSD010BFyrIZJotQdxzDkoY=; b=lhD9eCZqaOrUeQWc51B6eqYZheruDf0ivhBo4fjIpQqmdtPhbATSOc2RHzBGZ2mllC NeljydOkSPbh91vtHH9KCLKIFMk0BuLeKMTJ44xPJ1l4KmVvRnkiisn1bT/TB2X5TP5X nYKWU1QYjWcEDWRG5XQVAjzfeDs4LDcmCgqW8oquyEBAbmv7eU2BlHwVgIf8dXg969Y9 xqaSGJmNrDcACqihRy8ZWcuvGm1DHZXAJjA3ucLEWeBy2X/VocuHfYWiIq08O0K0XIq5 OMikLKtTm3Hi7ypRb0zxI3EVuUOH8bCZ5uyE8JxkUplVeSJtnBcB6/ZM2a1dYOvl8Dln kR5A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=wJGJiUYgfZjPHUoip+fYfSD010BFyrIZJotQdxzDkoY=; b=HlXA/keXz/0fmzin68NXMzzBRcWVUFHzpdWoHBv3xIaFNmJS5pWzy/JkMFNCw2aNpx 0SOg5QLRbs7pwUkqv7QgXXErkZM6ESt8YVSu37Wqa14LRStVgxxq6kgeRWM+zEyK4EEF soi3B0QbR9StJpYsWknjsdWw/00nfc69NdU5ApFexVLmu0cbbC7N3ZaM32hbpPnmkd2w PPl/1CCbsjWeBG437pxGEQofrK7A4KAg+ENnayGWyVdXG/7tDIihWBhfn+CdS+XUv9G4 d0aymEOTKejz3vKpo0zvLwIagYdbAwohc/HPG2FokrlsM6X0e/8HLKuSY+zQ0ZtXogjC zWyQ== X-Gm-Message-State: APjAAAUFEOnDNAL0V8Q77R3iSsJaqlruGSNeo2/EAzb1Bt5rl2bgbOkl tC+5aG+5WDOAIISCtRxRGSqlnK7hscHYv7RNQ96xy5c= X-Google-Smtp-Source: APXvYqyPatHSgoMWW1XIqxW5QwmqHBqdpz9SgQDWs4k1VJuWq0nHCYG44RNvAznqJC4tn4vWyWzkOaDr/VMhhHDEMHM= X-Received: by 2002:ac2:54b4:: with SMTP id w20mr6491352lfk.67.1579297779699; Fri, 17 Jan 2020 13:49:39 -0800 (PST) MIME-Version: 1.0 References: <20200117131722.083a4235@scorpio> <20200117140010.59c9076c@scorpio> In-Reply-To: <20200117140010.59c9076c@scorpio> From: Clay Daniels Date: Fri, 17 Jan 2020 21:49:28 +0000 Message-ID: Subject: Re: postfix linking with wrong version of openssl To: "freebsd-questions@freebsd.org" Cc: Bernard Spil X-Rspamd-Queue-Id: 47zvqB20K2z48JH X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-6.00 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; REPLY(-4.00)[]; TAGGED_FROM(0.00)[] Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jan 2020 21:49:42 -0000 I think the syntax with the "+" sign is important, and the spacing too. Take a look at what Bernard Spil suggests if you want to try LibreSSL: https://wiki.freebsd.org/LibreSSL Ports Using LibreSSL instead of OpenSSL has been integrated in the FreeBSD ports framework. Simply set one of the following in your /etc/make.conf (or corresponding make.conf for poudriere) For the current stable branch DEFAULT_VERSIONS+= ssl=libressl For the current next branch DEFAULT_VERSIONS+= ssl=libressl-devel Cheers, Clay On Fri, Jan 17, 2020 at 7:00 PM Jerry wrote: > On Fri, 17 Jan 2020 18:38:38 +0000, Matthew Seaman stated: > >On 17/01/2020 18:19, Jerry wrote: > >> Rhis doesn't make aqny sense to me, so I am hoping someone can > >> explain it. > >> > >> If I build "mail/postfix-current-sasl" it links with "OpenSSL 1.1.1d" > >> which I have installed from ports. However, if I build it using > >> 'poudriere', it links with the base version of openssl, "OpenSSL > >> 1.0.2s-freebsd ". > >> > >> The path, which I verified, is set as: > >> > >> PATH=/sbin:/bin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/local/sbin > >> > >> which openssl > >> /usr/local/bin/openssl > >> > >> What am I doing wrong? Is there a setting in poudriere that I am over > >> looking? > >> > > > >Yeah. You want to use DEFAULT_VERSIONS in > >/usr/local/etc/poudriere.d/make.conf -- > > > >DEFAULT_VERSIONS += ssl=openssl > > > >will cause all your pkgs to be linked against the security/openssl > >port, or > > > >DEFAULT_VERSIONS += ssl=base > > > >will use the base version of openssl. See > >/usr/ports/Mk/bsd.default-versions.mk for more options. > > > > Cheers, > > > > Matthew > > > > Matthew, I have this: > > DEFAULT_VERSIONS= ssl=openssl > > I don't have the "+" sign. Is that significant? I am not even sure what > it means. > > -- > Jerry >