Date: Thu, 6 Oct 2022 22:04:23 +0200 From: Matthias Andree <matthias.andree@tu-dortmund.de> To: Ganael Laplanche <ganael.laplanche@martymac.org>, Ganael LAPLANCHE <martymac@FreeBSD.org>, ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Cc: portmgr <portmgr@FreeBSD.org> Subject: Re: git: 9a36ff5299c8 - main - ftp/lftp: Fix build with libressl >= 2.7.0 Message-ID: <5bf28223-f496-0aa7-3dd2-9294ff4237c3@tu-dortmund.de> In-Reply-To: <d0b9063d-1cda-c2e1-7a04-f56b08a42960@martymac.org> References: <202210051845.295Ijrbg014568@gitrepo.freebsd.org> <34183267-0f60-bb0d-61c8-424d3b704fcd@tu-dortmund.de> <d0b9063d-1cda-c2e1-7a04-f56b08a42960@martymac.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Am 06.10.22 um 21:06 schrieb Ganael Laplanche: > Le 05/10/2022 à 21:20, Matthias Andree a écrit : > > Hello Matthias, > > > > Thanks for your feedback. > > > > > please decide to > > > > > > either mark this NO_PACKAGE, > > > > > > or if we want to continue providing binary packages: > > > > > > * remove the LibreSSL option, you cannot link GPLv3 software with > > > LibreSSL, > > > * and ensure that OpenSSL is either "from base" (GPL copyleft does > > > not apply to OS components (*)), or v3.0.x or newer (OpenSSL v3 is > > > Apache licensed and compatible with GPL v3). OpenSSL 1.x or older > > > from ports also cannot be used for binary shipments. > > > > There is no such 'LibreSSL' option within the port itself. It only uses : > > > > USES=ssl > > > > so it *can* be linked against libressl using the global : > > > > DEFAULT_VERSIONS+=ssl=libressl > > > > variable set (that's what my last commit fixed), but it is an opt-in > and *not* the default, which is set to 'base'. > > > > FreeBSD package build servers use that default configuration, so we > (FreeBSD) do *not* build and provide packages linked against libressl, > but only against base openssl. > > > > So everything should be good or am I missing something ? > Ganaël, Thanks for checking. Seems good, and possibly - with that reasoning - it's more the licensing framework that might want to check what licenses combine well and which don't. (I just don't understand the benefit of supporting LibreSSL in the framework at all. There have been a few months where LibreSSL was "better" than OpenSSL) Regards Matthias
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5bf28223-f496-0aa7-3dd2-9294ff4237c3>