Date: Thu, 29 Jan 2015 19:21:53 +1100 From: Dewayne Geraghty <dewayne.geraghty@heuristicsystems.com.au> To: Matthew Seaman <m.seaman@infracaninophile.co.uk> Cc: freebsd-ports@freebsd.org Subject: Re: Sprinkling WITH_OPENSSL_BASE in ports, ratbox build failure. Message-ID: <54C9EDA1.40003@heuristicsystems.com.au> In-Reply-To: <54C892ED.80509@infracaninophile.co.uk> References: <54C87A38.3070909@heuristicsystems.com.au> <54C892ED.80509@infracaninophile.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
On 28/01/2015 6:42 PM, Matthew Seaman wrote: > On 2015/01/28 05:57, Dewayne Geraghty wrote: >> ratbox generated an unusual error message today, via portmaster on a >> 10.1Stable, amd64 system >> However commenting out the recently inserted >> WITH_OPENSSL_BASE=yes >> from the Makefile enables the build to complete and uses the correct >> crypto and ssl libraries. Shouldn't it be an option base or port? Or >> is the openssl port going to go away? > More like the other way around: ports will use the openssl version from > ports exclusively, and the version in the base system will move into a > private location. (This is my understanding of current thinking, but I > make no guarantee that it is what does eventually get implemented.) > > The ircd-ratbox port doesn't appear to be doing anything unusual with > respect to openssl support that I can see from a quick inspection of the > port Makefile. > > If you've just added 'WITH_OPENSSL_BASE' to your make.conf, then (a) you > potentially need to recompile many ports which depend on openssl so you > don't end up with mixed linkage against both ports and base, and (b) > some ports require the ports version of openssl because they depend on > functionality only in the newer version available from ports. > > Personally, I prefer 'WITH_OPENSSL_PORT=yes' It's meant I have been > able to turn off SSLv2 and SSLv3 everywhere pretty simply (no more > POODLE...) > > Cheers, > > Matthew > > Matthew, Thank-you for taking the time to review and advise. It turned out that WITH_OPENSSL_BASE was inserted into the irc-ratbox/Makefile some time about but only recently took effect due to the addition of USE= openssl (#1) which triggered the application of openssl from base [Thanks to John Marshall for explaining the sequence, offline]. I do have WITH_OPENSSL_PORT in my old ports.conf so when I removed the WITH_OPENSSL_BASE from the Makefile everything went as expected. Since our email exchange the Makefile has been modified and the world is a happier place for it ;) Kind regards, Dewayne. PS I still use WITH/WITHOUT options in ports.conf as I have a filter that does the correct ..._SET/.._UNSET work. Done at a time during high ports flux. Reference: #1 I suspect that this had something to do with it https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=195796
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?54C9EDA1.40003>