Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Dec 2015 13:56:00 +0100
From:      Dan Lukes <dan@obluda.cz>
To:        freebsd-security <freebsd-security@freebsd.org>
Subject:   Re: [OpenSSL] /etc/ssl/cert.pem not honoured by default
Message-ID:  <56740260.1010308@obluda.cz>
In-Reply-To: <5673FB3B.2010201@freebsd.org>
References:  <loom.20151218T123930-865@post.gmane.org> <5673FB3B.2010201@freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 18.12.2015 13:25, Matthew Seaman wrote:
> Generally I find that setting 'WITH_OPENSSL_PORT=yes' is the route to crypto happiness in the ports.

Definitely. But beware of applications using system Kerberos libraries 
(it use system's OpenSSL).

If an application import library A that depend on system's OpenSSL and 
library B that depend on port's OpenSSL the troubles are imminent.

Dan




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?56740260.1010308>