Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Jul 2006 17:43:57 +0200
From:      "Simon L. Nielsen" <simon@FreeBSD.org>
To:        Alex Dupre <ale@FreeBSD.org>
Cc:        freebsd-current@freebsd.org
Subject:   Re: Request for test/comments: OpenSSL 0.9.8b import
Message-ID:  <20060712154357.GF1090@zaphod.nitro.dk>
In-Reply-To: <44B512EA.6050101@FreeBSD.org>
References:  <20060712151032.GE1090@zaphod.nitro.dk> <44B512EA.6050101@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--sLx0z+5FKKtIVDwd
Content-Type: multipart/mixed; boundary="Mjqg7Yu+0hL22rav"
Content-Disposition: inline


--Mjqg7Yu+0hL22rav
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2006.07.12 17:19:06 +0200, Alex Dupre wrote:
> Simon L. Nielsen wrote:
> >I have been working on preparing an import of OpenSSL 0.9.8b into the
> >base system.  Before actually doing the import I would like to get
> >comments
>=20
> I haven't read the patch, but I'd like OpenSSL in base could load=20
> dynamic engine modules (problem described in PR 79570).

That is one of the things the patch enables.  Actually the reason I
started looking at an OpenSSL import in the first place was due to my
initial pain with loading the opensc engine :-).

It should actually be pretty simple to enable DSO support in
[56]-STABLE, but I prefer to wait with that after the 0.9.8b import
has settled in -CURRENT.  The attached _untested_ patch (which can
also be found at
http://people.freebsd.org/~simon/patches/openssl-DSO-6STABLE.patch )
should do the trick.

[simon@zaphod:~] openssl
OpenSSL> version
OpenSSL 0.9.8b 04 May 2006
OpenSSL> engine dynamic -pre SO_PATH:/usr/local/lib/engines/engine_pkcs11.s=
o -pre ID:pkcs11 -pre LIST_ADD:1 -pre LOAD -pre MODULE_PATH:/usr/local/lib/=
opensc-pkcs11.so
(dynamic) Dynamic engine loading support
[Success]: SO_PATH:/usr/local/lib/engines/engine_pkcs11.so
[Success]: ID:pkcs11
[Success]: LIST_ADD:1
[Success]: LOAD
[Success]: MODULE_PATH:/usr/local/lib/opensc-pkcs11.so
Loaded: (pkcs11) pkcs11 engine

--=20
Simon L. Nielsen

--Mjqg7Yu+0hL22rav
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="openssl-DSO-6STABLE.patch"
Content-Transfer-Encoding: quoted-printable

Index: secure/lib/libcrypto/Makefile.inc
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
RCS file: /home/ncvs/src/secure/lib/libcrypto/Makefile.inc,v
retrieving revision 1.40
diff -u -d -r1.40 Makefile.inc
--- secure/lib/libcrypto/Makefile.inc	25 Feb 2005 06:04:09 -0000	1.40
+++ secure/lib/libcrypto/Makefile.inc	12 Jul 2006 15:40:55 -0000
@@ -5,7 +5,7 @@
=20
 CFLAGS+=3D	-DTERMIOS -DANSI_SOURCE
 CFLAGS+=3D	-I${LCRYPTO_SRC} -I${LCRYPTO_SRC}/crypto -I${.OBJDIR}
-CFLAGS+=3D	-DOPENSSL_THREADS
+CFLAGS+=3D	-DOPENSSL_THREADS -DDSO_DLFCN -DHAVE_DLFCN_H
=20
 .if !defined(MAKE_IDEA)
 CFLAGS+=3D	-DOPENSSL_NO_IDEA

--Mjqg7Yu+0hL22rav--

--sLx0z+5FKKtIVDwd
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (FreeBSD)

iD8DBQFEtRi9h9pcDSc1mlERAgoVAJ4uOA4RmocX8o7U09yXF+DJqlnotgCgxVhE
9HzSTTxlzIpoelUMC28JjXI=
=JVqa
-----END PGP SIGNATURE-----

--sLx0z+5FKKtIVDwd--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060712154357.GF1090>