From owner-freebsd-ports@freebsd.org Sat Jan 6 00:01:41 2018 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8B240EA8924 for ; Sat, 6 Jan 2018 00:01:41 +0000 (UTC) (envelope-from josh@endries.org) Received: from mail-ot0-x229.google.com (mail-ot0-x229.google.com [IPv6:2607:f8b0:4003:c0f::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5F3A766E6C for ; Sat, 6 Jan 2018 00:01:41 +0000 (UTC) (envelope-from josh@endries.org) Received: by mail-ot0-x229.google.com with SMTP id p31so5239384ota.4 for ; Fri, 05 Jan 2018 16:01:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=endries.org; s=google; h=mime-version:from:date:message-id:subject:to; bh=UW95VmQl/sTChwaM3yf6DgKnMvn5BV4FYjzOWW8HsCo=; b=ijGbyWeHGAKnxxYVZLykyTG3Jy+9/yazvvbXgLTy0kzocuad6JInXAxOVsq0aJv9BO hfDfo6+k+G/6fefVBFLP0Bl8vF4r54y1uQBW0e1OnZ3p+o1l2/xllLNsUPOCAwYbAclC uydD8L6Q7yNrs71x0rf08t3M/mr82pxeyXcCw= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=UW95VmQl/sTChwaM3yf6DgKnMvn5BV4FYjzOWW8HsCo=; b=hY4HxTdE+tl5quwlcSoWo4sU8nQRXmBbvj53QxAfX0sg3sug5nkyOHSbeOGfQQtXTW d+/33LkMPc2By7Wkd1Yk8DTINbc6IiwYh2HrUXeps3xNTUd6Sk1FyyQXpyJ9FTdSgoSB F0ZKJ2K3iCLNU/5aJsyDdZMhWB+KabfYApysv0ZZfcGAX+LSvJd39Dv/35IlpDxRpDAb pDagxmOSqbNVt0ec/OhWKnp2zvukk4sJv7qL6X6um0tJxyLrt0q09o9bA8XwVuE/78ME cXmQC1v4oj9z/WYUHZIKr2HRG6R4iH+pZBNuwhILRtEzOEaSAJOFlLyD5W6dqjccq/5O l5+w== X-Gm-Message-State: AKwxytcKjwsN4PRl0xTemYgW23Ns+A1fsvAu/k922BjTMbDWxIPoqryk va0gjVsIFVvUXwPSdIcvsVIbDVDb1IKiJ4lRndPGhlxZ0+g= X-Google-Smtp-Source: ACJfBousd7zq8PdlOvP342YOAGLWvc3FHB2kpz3/u5xCi1QtEwO2T4DqYcNMWil0RO1EyhHEhr0YIQy3zbtRvPRpqXA= X-Received: by 10.157.48.78 with SMTP id w14mr2572826otd.396.1515196900360; Fri, 05 Jan 2018 16:01:40 -0800 (PST) MIME-Version: 1.0 Received: by 10.157.11.6 with HTTP; Fri, 5 Jan 2018 16:01:39 -0800 (PST) X-Originating-IP: [98.23.173.208] From: Josh Endries Date: Fri, 5 Jan 2018 19:01:39 -0500 Message-ID: Subject: Puppet SSL-related problems after updating Ruby To: freebsd-ports@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.25 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 06 Jan 2018 00:01:41 -0000 I recently updated packages on a 11.0 machine, which upgraded Ruby from 2.3.5 to 2.3.6 (I think), and my Puppet install broke. It is logging SSL-related issues with this message: SSL_read: decryption failed or bad record mac I thought maybe it was a problem with outdated OpenSSL so I updated to 11.1-R-p6 a minute ago, but the problem persists. I did reinstall all packages after updating and rebooted a few times throughout the process; followed the handbook. $ openssl version;uname -a;freebsd-version OpenSSL 1.0.2k-freebsd 26 Jan 2017 FreeBSD puppet1-test 11.1-RELEASE-p4 FreeBSD 11.1-RELEASE-p4 #0: Tue Nov 14 06:12:40 UTC 2017 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64 11.1-RELEASE-p6 I'm not sure what to do at this point. I could force it to reinstall Ruby 2.3.5, and lock those packages, which worked on 11.0, but I would rather be able to keep things up to date. I could possibly try OpenSSL from ports, but is there a way to use that with Puppet from pkg?