From owner-freebsd-ports@freebsd.org Wed Nov 30 18:36:00 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BE13EC5D23E for ; Wed, 30 Nov 2016 18:36:00 +0000 (UTC) (envelope-from jhs@berklix.com) Received: from mailman.ysv.freebsd.org (unknown [127.0.1.3]) by mx1.freebsd.org (Postfix) with ESMTP id A91541828 for ; Wed, 30 Nov 2016 18:36:00 +0000 (UTC) (envelope-from jhs@berklix.com) Received: by mailman.ysv.freebsd.org (Postfix) id A5818C5D23D; Wed, 30 Nov 2016 18:36:00 +0000 (UTC) Delivered-To: ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A5215C5D23C for ; Wed, 30 Nov 2016 18:36:00 +0000 (UTC) (envelope-from jhs@berklix.com) Received: from land.berklix.org (land.berklix.org [144.76.10.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 541EF1827 for ; Wed, 30 Nov 2016 18:35:59 +0000 (UTC) (envelope-from jhs@berklix.com) Received: from mart.js.berklix.net (p5083CD56.dip0.t-ipconnect.de [80.131.205.86]) (authenticated bits=128) by land.berklix.org (8.15.2/8.15.2) with ESMTPA id uAUIZtJZ088833 for ; Wed, 30 Nov 2016 18:35:55 GMT (envelope-from jhs@berklix.com) Received: from fire.js.berklix.net (fire.js.berklix.net [192.168.91.41]) by mart.js.berklix.net (8.14.3/8.14.3) with ESMTP id uAUIZof2081180 for ; Wed, 30 Nov 2016 19:35:50 +0100 (CET) (envelope-from jhs@berklix.com) Received: from fire.js.berklix.net (localhost [127.0.0.1]) by fire.js.berklix.net (8.14.7/8.14.7) with ESMTP id uAUIZbxF037904 for ; Wed, 30 Nov 2016 19:35:50 +0100 (CET) (envelope-from jhs@berklix.com) Message-Id: <201611301835.uAUIZbxF037904@fire.js.berklix.net> To: ports@freebsd.org Subject: Breaking SSL options: Which to use to build 1000 ports? From: "Julian H. Stacey" Organization: http://berklix.eu BSD Linux Unix Consultants, Munich Germany User-agent: EXMH on FreeBSD http://www.berklix.eu/free/ X-From: http://www.berklix.eu/~jhs/ Date: Wed, 30 Nov 2016 19:35:37 +0100 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 30 Nov 2016 18:36:00 -0000 Hi ports@freebsd.org Advice Please: I need some SSL settings I can compile 1000 ports with. I dont care which SSL. (Any of eg base from src/ or any from devel/ ) I dont care if SSL fails to run on most ports. I need 1000 ports to compile & install, & stop wasting my time with SSL. SSL will not even be used in most cases, Here's a small subset of ever growing DUDS= fail to build because of SSL: arandr fetchmail fvwm2 xf86-input-keyboard xf86-input-mouse xf86-video-chips xf86-video-fbdev xf86-video-neomagic xf86-video-vesa xorg xorg-apps xorg-server I make ports from sources, never packages, using ports/*/Makefile.local with SUBDIR+= ports_i_want I purged some old old duplicate bins & libs, & now need to do eg cd /usr/ports ; make BERKLIX_CLIENT=YES BERKLIX_SERVER=YES install Lots of ports fail to build, no matter which SSL options I try, currently (with make.conf below) I'm seeing a dependent port eg: cd /usr/ports/security/p5-GSSAPI ; make ===> p5-GSSAPI-0.28_1 You are using OpenSSL from ports and have selected GSSAPI from base, please select another GSSAPI value. I can't revert to src/ base as loads of ports want devel/openssl pkg delete openssl-1.0.2j_1,1 # Number of packages to be removed: 149 FreeBSD's SSL defaults seem a mess : complex, breaking on loads of ports, inadequately documented, insufficiently clear error messages. My current /etc/make.conf: ---------------- # GSSAPI: Generic Security Services Application Program Interface # http://en.wikipedia.org/wiki/Generic_Security_Services_Application_Program_Interface # /usr/ports/Mk/Uses/gssapi.mk: # You are using OpenSSL from ports and have selected # GSSAPI from base, please select another GSSAPI value. # cd /usr/ports/security/openssl; echo ../*ssl* # SSL_DEFAULT=base # Disapproved of by # /usr/ports/Mk/bsd.default-versions.mk # which instead reccomends: # DEFAULT_VERSIONS+=ssl=base # DEFAULT_VERSIONS+=ssl=openssl # Possible values: base, openssl, openssl-devel, libressl, libressl-devel # & also has: # WITH_OPENSSL_* DEFAULT_VERSIONS+=ssl=openssl # WITH_OPENSSL="YES" # WITH_OPENSSL="openssl" # WITH_OPENSSL_PORT="YES" # WITH_OPENSSL_PORT="openssl" # SEE ALSO # /etc/src.conf (used only by src/), # whereas this make.conf used by both src/ & ports/. # https://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/openssl.html # WITH_OPENSSL_PORT WITH_OPENSSL_BASE # man 7 ports # /usr/ports/Mk/Uses/gssapi.mk ---------------- Advice welcome, Thanks ! Cheers, Julian -- Julian Stacey, BSD Linux Unix Sys Eng Consultant Munich Reply below, Prefix '> '. Plain text, No .doc, base64, HTML, quoted-printable. http://berklix.eu/brexit/#stolen_votes