From owner-freebsd-current@freebsd.org Thu Feb 8 20:37:51 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 03912F02943 for ; Thu, 8 Feb 2018 20:37:51 +0000 (UTC) (envelope-from jkim@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) by mx1.freebsd.org (Postfix) with ESMTP id 9FAF87C529; Thu, 8 Feb 2018 20:37:50 +0000 (UTC) (envelope-from jkim@FreeBSD.org) Subject: Re: openssl in base should install c_rehash To: =?UTF-8?Q?Ulrich_Sp=c3=b6rlein?= Cc: Jan Bramkamp , FreeBSD-current References: <277d8257-019b-714b-8014-7c741e427547@FreeBSD.org> From: Jung-uk Kim Message-ID: Date: Thu, 8 Feb 2018 15:37:46 -0500 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101 Thunderbird/52.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="W29JvWUCEFahBCJMJyoRnBktHcevo9FKD" X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Feb 2018 20:37:51 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --W29JvWUCEFahBCJMJyoRnBktHcevo9FKD Content-Type: multipart/mixed; boundary="HTA3SRaR8yNVemDPKL9P0wKuyKUUaGBWx"; protected-headers="v1" From: Jung-uk Kim To: =?UTF-8?Q?Ulrich_Sp=c3=b6rlein?= Cc: Jan Bramkamp , FreeBSD-current Message-ID: Subject: Re: openssl in base should install c_rehash References: <277d8257-019b-714b-8014-7c741e427547@FreeBSD.org> In-Reply-To: --HTA3SRaR8yNVemDPKL9P0wKuyKUUaGBWx Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 02/08/2018 15:15, Ulrich Sp=C3=B6rlein wrote: >=20 > 2018-02-08 21:00 GMT+01:00 Jung-uk Kim >: >=20 > On 02/08/2018 08:52, Jan Bramkamp wrote: > > On 08.02.18 14:24, Ulrich Sp=C3=B6rlein wrote: > >> Hey, > >> > >> c_rehash has somehow disappeared from the base system. We still > >> install the > >> manpage it seems, but the tool itself is missing. Can we have th= at back? > >> > >> > >> root@acme:/etc/ssl# locate c_rehash > >> ... > >> /usr/share/openssl/man/man1/c_rehash.1.gz > >> /usr/src/crypto/openssl/doc/apps/c_rehash.pod > >> /usr/src/secure/usr.bin/openssl/man/c_rehash.1 > >> > >> > >> The port seems to install it just fine: > >> > >> root@acme:/etc/ssl# grep -r c_rehash /usr/ports/ > >> /usr/ports/security/openssl/pkg-plist:bin/c_rehash > >> /usr/ports/security/openssl/pkg-plist:man/man1/c_rehash.1.gz > >> > >> It looks like the merge of OpenSSL 1.0.1c got rid of it (if I'm > >> reading the > >> history with git pickaxe right). > > > > The LibreSSL port lacks a c_rehash script as well. Putting c_reha= sh back > > into base wouldn't solve the problem because it requires Perl 5. >=20 > Correct.=C2=A0 I just removed the manual page to not confuse users.= >=20 > https://svnweb.freebsd.org/changeset/base/329024 > >=20 > Thanks for letting me know! >=20 > Jung-uk Kim >=20 >=20 > I would rather that c_rehash is brought back. I can install perl just > fine (or have it anyway installed), that's not the case with openssl > from ports, as that will mess up many things. Although c_rehash was available from src/crypto/openssl/tools, we have never installed it in the base, AFAIK. Actually, it does not use proper perl binary (i.e., /usr/bin/perl vs. /usr/local/bin/perl) and certs directory (i.e., /usr/local/ssl/certs vs. /etc/ssl/certs). https://svnweb.freebsd.org/base/vendor-crypto/openssl/dist-0.9.8/tools/c_= rehash?revision=3D247942&view=3Dco Jung-uk Kim > Guess I'll download my own version ... :( --HTA3SRaR8yNVemDPKL9P0wKuyKUUaGBWx-- --W29JvWUCEFahBCJMJyoRnBktHcevo9FKD Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEl1bqgKaRyqfWXu/CfJ+WJvzb8UYFAlp8tRoACgkQfJ+WJvzb 8UaLRwf/dGEnBycnFf6QzWhWZaCVcyhXpabWarbmv7GtMyXjiFieiyQflcGc8Gvc bnk+8+9y/SfrBgMysxvrHhUg1029lL/2fntyKA1p4EqAYs/mW8EUSePQD7rDUlga RCkcw2zL+ikwmm+AtiwKV4dmU/ZwImL9CRL0vLykO07DX3XoP0I+5MwtzqaRN3re eFggr9t2lVwd9b1Il9ARA3W9pdTG0vUUxU47fJIZZ4DMW41hChmOsDlVDtMtsw8d ds0qvbSjUm9tiooI5/Vw/Esc4C00ENuNgAdE8uIyI5+SjJkQopIIYKEbVvu5FycH r/hMpqJLAhD78kbxBquj1DrZgNyxhw== =F6in -----END PGP SIGNATURE----- --W29JvWUCEFahBCJMJyoRnBktHcevo9FKD--