From owner-freebsd-ports@freebsd.org Thu Oct 27 12:49:12 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CFB8BC22737 for ; Thu, 27 Oct 2016 12:49:12 +0000 (UTC) (envelope-from demelier.david@gmail.com) Received: from mail-vk0-x234.google.com (mail-vk0-x234.google.com [IPv6:2607:f8b0:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 891A329B; Thu, 27 Oct 2016 12:49:12 +0000 (UTC) (envelope-from demelier.david@gmail.com) Received: by mail-vk0-x234.google.com with SMTP id q126so27351350vkd.2; Thu, 27 Oct 2016 05:49:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=AEG2bhKojjbUnYqucVJYWbXRfOf5IWiHddedXmH1QCQ=; b=eG1EhmSex3rKxlM/vMx1iw37gYXya2XGc5pqUmONS5dTcVm6UM6kEXktrQ1EP6b8Lp NhuGAQ8mX2voqkEFfn6lLzcE8CFBqvDySNJ0KAjmbcre46T2FiIkGX3/X40P5QYKU4o9 MJ+bOtJLV7m/Zw4BfsLNTLHo9/yGouiFbtPKhZQgtZIbpmZ5y9tUinGtJPv6Zin4uj8h U4rtcmn7GktxLd7UpKoYPnW8JBBpR9UJpfPL7/LV9SdLngsKzNiWeScdW/EWZYx4E0ek 31EmJk+80k/DuSJ1eEUVt7BHAmCvTo+sCXvNl+L+zYmTRyO0Yy/yB6nbAsSxSjJVIn3S ob/g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=AEG2bhKojjbUnYqucVJYWbXRfOf5IWiHddedXmH1QCQ=; b=ivDWHghmbu3L9xVTRet1AJH2Y3dp2rxvAN6I49omEYNfyXBM1YK50uhZo3vlvTjhHp fTsHGiNB4X+p017tXNO79cSDUvzEUei93oslv5O3qiOJjE/G7EEZ4s+kSaNJn/InOoG1 Rh+G6UJ5yA71fX47vKVcritXN/ThOSjv7JE6ky6iPmLSfj6ZAhQu9xGB9F9dzK+QcJs0 JTUlGcYpAr03GhzQd7QzDUIrqdSpuyoG7JNkEqhaipMGwFJkdO9ry5qQSaFC4AdUnsYn 4lguWb08RqDXu5UlZ4iUB3o9zAw73pdlteBu5roIV+Ae3XnAbbkN9NvZJgdWne3+njZQ BV7g== X-Gm-Message-State: ABUngvfseGlsLw8Tw8vDLJxDzH6OfpbY5mTZ0/b37YqalafSBsX4rWaxSfTVyKOpnSi0x4Wu9Ynqpz+pP/oybg== X-Received: by 10.31.178.198 with SMTP id b189mr5655795vkf.70.1477572551532; Thu, 27 Oct 2016 05:49:11 -0700 (PDT) MIME-Version: 1.0 Received: by 10.103.9.196 with HTTP; Thu, 27 Oct 2016 05:49:10 -0700 (PDT) In-Reply-To: <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org> References: <201610252214.u9PME6br070248@gw.catspoiler.org> <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org> From: David Demelier Date: Thu, 27 Oct 2016 14:49:10 +0200 Message-ID: Subject: Re: lighttpd does not pull OpenSSL dependency To: Mathieu Arnold Cc: Don Lewis , mad@madpilot.net, freebsd-ports@freebsd.org Content-Type: text/plain; charset=UTF-8 X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2016 12:49:12 -0000 2016-10-27 11:00 GMT+02:00 Mathieu Arnold : > Before changing the default, though, I need to change the way GSSAPI is > handled, and create a DEFAULT_VERSIONS+=gssapi= > and change all the ports with the USES=gssapi that gives options to the > users. > But I don't use all of that, so I need help figuring out which should be > the default afterwards (it can't be base, because you can't mix base > heimdal with non base openssl) I've just tested my lighttpd package into a fresh jail, it has not installed openssl and the lighttpd binary was using /usr/lib/libssl from base instead. There is indeed something wrong then, because if I install openssl, lighttpd will use one from /usr/local/lib which is terrible as we have no guarantee about openssl ABI compatibility. I don't know much linker options, but it is possible to make absolute shared library dependency ? Like -l/usr/lib/libssl.so instead of -lssl. Will this force lighttpd to use openssl from base? That's what I dislike in having some software in base and also in ports. We need to figure out that. Or the best is to avoid having too much software in base. For example, it's nice to have ssh in base, but I have no problem if we need to install it in the next years. This will also have the benefits of more recent versions. By the way, for what openssl is needed in base? Regards, -- Demelier David