From owner-freebsd-ports@FreeBSD.ORG Wed Apr 8 20:27:22 2015 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 03D21A1D for ; Wed, 8 Apr 2015 20:27:22 +0000 (UTC) Received: from mail-in-16.arcor-online.net (mail-in-16.arcor-online.net [151.189.21.56]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (Client CN "mx.arcor.de", Issuer "Thawte SSL CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id A8F5D375 for ; Wed, 8 Apr 2015 20:27:20 +0000 (UTC) Received: from mail-in-05-z2.arcor-online.net (mail-in-05-z2.arcor-online.net [151.189.8.17]) by mx.arcor.de (Postfix) with ESMTP id 3lMbvJ6BcnzDyX for ; Wed, 8 Apr 2015 21:55:56 +0200 (CEST) Received: from mail-in-02.arcor-online.net (mail-in-02.arcor-online.net [151.189.21.42]) by mail-in-05-z2.arcor-online.net (Postfix) with ESMTP id D0C1D11AFF8 for ; Wed, 8 Apr 2015 21:55:56 +0200 (CEST) X-Greylist: Passed host: 188.98.153.28 X-DKIM: Sendmail DKIM Filter v2.8.2 mail-in-02.arcor-online.net 3lMbvJ4jDWz1T0C Received: from lorvorc.mips.inka.de (dslb-188-098-153-028.188.098.pools.vodafone-ip.de [188.98.153.28]) by mail-in-02.arcor-online.net (Postfix) with ESMTPS id 3lMbvJ4jDWz1T0C for ; Wed, 8 Apr 2015 21:55:56 +0200 (CEST) Received: from lorvorc.mips.inka.de (localhost [127.0.0.1]) by lorvorc.mips.inka.de (8.14.9/8.14.9) with ESMTP id t38JuB32085549 for ; Wed, 8 Apr 2015 21:56:11 +0200 (CEST) (envelope-from news@lorvorc.mips.inka.de) Received: (from news@localhost) by lorvorc.mips.inka.de (8.14.9/8.14.9/Submit) id t38JuBgB085548 for freebsd-ports@freebsd.org; Wed, 8 Apr 2015 21:56:11 +0200 (CEST) (envelope-from news) To: freebsd-ports@freebsd.org From: Christian Weisgerber Newsgroups: list.freebsd.ports Subject: LibreSSL infects ports, causes problems Date: Wed, 8 Apr 2015 19:56:11 +0000 (UTC) Lines: 36 Message-ID: X-Trace: lorvorc.mips.inka.de 1428522971 85343 ::1 (8 Apr 2015 19:56:11 GMT) X-Complaints-To: usenet@mips.inka.de User-Agent: slrn/1.0.2 (FreeBSD) X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 20:27:22 -0000 It looks like our already complicated situation with base OpenSSL and ports OpenSSL got even messier with the addition of LibreSSL. I recently installed security/libressl for the pending net/openntpd update (*). Now when I try to pkg delete it again, I get this: Installed packages to be REMOVED: libressl-2.1.6 openntpd-5.7p4,2 xorg-server-1.14.7_4,1 git-lite-2.3.5 mutt-1.5.23_8 xf86-video-mach64-6.9.4_5 xf86-video-nv-2.1.20_6 xf86-video-openchrome-0.3.3_5 xf86-video-r128-6.9.2_5 xf86-video-vesa-2.3.3_5 xf86-input-keyboard-1.8.0_7 xf86-input-mouse-1.9.0_6 xf86-video-ati-7.5.0_2 xf86-video-intel-2.21.15_7 xorg-drivers-7.7_3 xorg-7.7_2 Obviously LibreSSL has "infected" various other ports that happened to be recompiled while it was installed on the system. I'm glad that pkg(1) detects this, but the situation is certainly a surprise. Why did I want to remove LibreSSL, you ask? Because lang/python27 also picks it up, fails to build the _ssl module due to a missing RAND_egd(), and finally errors out on install. *) There is an interoperability problem with LibreSSL and ca_root_nss, which causes OpenNTPD's new https constraints feature to fail, which is why I haven't updated the net/openntpd yet. -- Christian "naddy" Weisgerber naddy@mips.inka.de