From owner-freebsd-current@freebsd.org Wed Jan 16 17:52:30 2019 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 890C214901A1 for ; Wed, 16 Jan 2019 17:52:30 +0000 (UTC) (envelope-from yaneurabeya@gmail.com) Received: from mail-pg1-x542.google.com (mail-pg1-x542.google.com [IPv6:2607:f8b0:4864:20::542]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8B38A77FFA; Wed, 16 Jan 2019 17:52:29 +0000 (UTC) (envelope-from yaneurabeya@gmail.com) Received: by mail-pg1-x542.google.com with SMTP id t13so3129796pgr.11; Wed, 16 Jan 2019 09:52:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=5v0tY28l/Z3uA7OuPoNpvsDNLUCOWfR8JItpsnckftU=; b=h/wMhaHbPhBQBgFku5Lt8KkPn2Gj3fzNU512y+sz1Vybd7gZoxQYKf2GvusxFrtlEm fvMMaNNA0wM42d9WQ5ACfcWtvP6SsqujfeCpB+GQjKZziBic5m+O0vLpbtgvI+ryPmYr u9hfc6zCZBKEUfvksihul3664ElrERzUUOVI9SAFbLQgIiV3jSS1gDDbL8oZkZ1m5dWs sX2FSJzoq9XYzJjwevxIaUkLDZzeUNzhdhu1p6y9oE29yv/lWvv4RmfnV88VqD34bgWa Nq8i2rVSgG25Zv+/cteTrGFNgeHtqsaDovBmZ5cp/xQ3VI+tmFJEzyPcBG5skpP1X0iD mLYg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=5v0tY28l/Z3uA7OuPoNpvsDNLUCOWfR8JItpsnckftU=; b=kHxwWvYGi/SqIH4vgkiPQpw2LvX6135Y2kvEF2lOFY8K2SmzcgL2hHtwGLIWUvf2ch daUgZjtb3nbGVqDTgR/Il+DXkEWCIhtdReIG+PiRNkdss7vE6VU0cpGVZjYYiW/5VCg2 hW5BdHpCgjgUvoEQZsJZ+vQ/Z8ZLi5rZLKBE3BLsq1ZM3UhjPoFoILQwJeTsc3oO4rVG dZyS6IMFPYpD627VTv6fKY/ZQAMKwPl8KNcyRdGnY0+dlWzp6rCsEQ4xYDk6qi38Decs Ijmqq9xJ8hae+t9cBykftQnpB+ZVkw4dxbdfi55u8kD9qjJ8+PG3CIqhwm6xglKFh0Pr GSOQ== X-Gm-Message-State: AJcUukfRkjy0P4bBQBfQLBPmO0z/IYQ1rpcNgPJIWFyc2XyKDqSympVu mRYqvIZGJfJEpnBDIqyqGC8ygsJZ X-Google-Smtp-Source: ALg8bN4vO3ycqEwpiuacDDTFr8H/bEebJ/7ZjUillWAOCM9cAedsRPV/ywaIf5Q/JHgPOpLyF+o7Zw== X-Received: by 2002:a62:4bcf:: with SMTP id d76mr11453278pfj.170.1547661148426; Wed, 16 Jan 2019 09:52:28 -0800 (PST) Received: from [192.168.20.7] (c-73-19-52-228.hsd1.wa.comcast.net. [73.19.52.228]) by smtp.gmail.com with ESMTPSA id c23sm8673591pfi.83.2019.01.16.09.52.27 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 16 Jan 2019 09:52:27 -0800 (PST) From: Enji Cooper Message-Id: <0FD8FC97-BE08-41E2-A414-87991B9B5180@gmail.com> Content-Type: multipart/signed; boundary="Apple-Mail=_A5F965E6-2AAE-4794-A4F8-1510B9AA7BBE"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Subject: Re: openssl 1.1.1 utils mkerr.pl Date: Wed, 16 Jan 2019 09:52:26 -0800 In-Reply-To: Cc: FreeBSD Current , Jung-uk Kim To: David Cornejo References: X-Mailer: Apple Mail (2.3445.9.1) X-Rspamd-Queue-Id: 8B38A77FFA X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=h/wMhaHb; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of yaneurabeya@gmail.com designates 2607:f8b0:4864:20::542 as permitted sender) smtp.mailfrom=yaneurabeya@gmail.com X-Spamd-Result: default: False [-5.13 / 15.00]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; MV_CASE(0.50)[]; HAS_ATTACHMENT(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; RCVD_COUNT_THREE(0.00)[3]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; NEURAL_HAM_SHORT(-0.82)[-0.825,0]; SIGNED_PGP(-2.00)[]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; MID_RHS_MATCH_FROM(0.00)[]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; URL_IN_SUBJECT(0.40)[mkerr.pl]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_THREE(0.00)[3]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2.4.5.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.b.8.f.7.0.6.2.list.dnswl.org : 127.0.5.0]; IP_SCORE(-0.10)[ip: (3.77), ipnet: 2607:f8b0::/32(-2.39), asn: 15169(-1.80), country: US(-0.08)] X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Jan 2019 17:52:30 -0000 --Apple-Mail=_A5F965E6-2AAE-4794-A4F8-1510B9AA7BBE Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jan 15, 2019, at 5:55 PM, David Cornejo wrote: >=20 > Hi, >=20 > I am working on some code that wants to use mkerr.pl from the openssl > distribution - but this appears to have been left out of the import to > base. >=20 > Is there an alternative method to create the include files produced > from this script in FreeBSD? Hi Dave, I would go a different route from what was mentioned by others =E2=80=94 = I would actually either grab mkerr.pl from upstream from the release = package (upstream on GitHub is = https://github.com/openssl/openssl/releases ) (sidenote: I don=E2=80=99t = know why, but our vendor-crypto tree lacks this script as well; jkim@ = CCed). Why go this route? You can easily grab the file using a tool like = curl, fetch, or wget from GitHub, and you can be sure that the version = you=E2=80=99re grabbing is the upstream release version. The only = downside of this route is that you might have to apply local patches in = order to fix bugs with the script itself (which the port would handle), = and you=E2=80=99ll have to grab all dependencies (in this case/version: = configdata.pm, which is generated from the release). Example: fetch -o mkerr.pl = https://raw.githubusercontent.com/openssl/openssl/d1c28d791a7391a8dc101713= cd8646df96491d03/util/mkerr.pl I think that these files should be committed in the vendor-crypto tree, = along with crypto/openssl ; although FreeBSD as a project doesn=E2=80=99t = have much value for these files, other repackagers do have value for = these files (Isilon had to recompile openssl to deal with some = modifications to the library for FIPS compliance). Why am I not recommending the port outright? Depending on which version = of openssl you=E2=80=99re based on, you might need to maintain a = Frankensteinian version of the port to deal with the current (or old) = ports framework, which can be=E2=80=A6 noisome (speaking from experience = having dealt with this at Isilon with a 3 year old port system in the = past). Plus, some of the config might differ (=E2=80=94prefix, etc), = causing the version you=E2=80=99re configuring to differ from the base = system version. Alternatively, you could just bypass openssl in base and patch a copy = from ports and be done with it. Cheers, -Enji --Apple-Mail=_A5F965E6-2AAE-4794-A4F8-1510B9AA7BBE Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEtvtxN6kOllEF3nmX5JFNMZeDGN4FAlw/b1oACgkQ5JFNMZeD GN5lsQ/+P/jwgTQTNDBRWHIz2wijrBBznfLwXvdx1aT+u4xLdPdo0FqZKL0m2iCJ fXY+gH5BgQWATnA8Ra+aA3DHE7uHEW0lOua4rSSPJS6yrZSTZlSNGZS0zzbD6tsl kNl3ulNQkNCSbHOCi7M+R0JRmEetHdTcqXLthZFY+rMq2dt1J8MkNN4hqAu6TgyL WV6hsbeovqNSQKD/t3w/NbTdx3j43oLoJZ2dufatLP+/g1BtEkkkh4uneOBrUOm8 JYJaK6m1IXXKAVTvOO6xY3Iewn+aA+j97A4BxXK9xe0X/FMo1gHYf+NG6BvteZG3 49yIsSJgC5V7yZMNoHMnm+ar/HePLM8wA09G3vRCGtGgW3dibKs1nB+N74Zqltku YMnwALuEm3Dm3/Rw+iTDqsfhCi1EeFbx9FG0k/QZ8pr9kvqooOhSL2fGAkLvOsTo fey5ZkfKtWP2uKWPx7O9qTwHF/RSqv1YXmk5SMoZ82AYFu8nWilYsbamWpci5XsO fUwOepGFKVzoDQsIkezDzuZalVWFBHvQmMor69qnMzrMFJZC0hSZ46Pw1NL4ZpY3 WdPS0MZ/JovzadXANOfZorQJax+35nTpZKMEvhSpqrxCjcIpjAlb0XHXeYj44s9/ pIgngNt/THG/pSiYal0A2fPedXZ5YlIL+vFbF1zDzqqaiwSbKtw= =xDp8 -----END PGP SIGNATURE----- --Apple-Mail=_A5F965E6-2AAE-4794-A4F8-1510B9AA7BBE--