From owner-freebsd-ports@freebsd.org Thu Oct 27 15:22:25 2016 Return-Path: Delivered-To: freebsd-ports@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CEE5AC24A62 for ; Thu, 27 Oct 2016 15:22:25 +0000 (UTC) (envelope-from matt.xtaz@gmail.com) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4EE7CBB2; Thu, 27 Oct 2016 15:22:25 +0000 (UTC) (envelope-from matt.xtaz@gmail.com) Received: by mail-wm0-x22f.google.com with SMTP id 140so29853909wmv.0; Thu, 27 Oct 2016 08:22:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=date:from:to:cc:subject:message-id:mail-followup-to:references :mime-version:content-disposition:in-reply-to:user-agent; bh=rtMhDamtuuA+JiHrdeHtJRB6RJa7XFspH6Hxp+S6fUY=; b=ovjx74brXe/TiWTnFPD9apVZPXHEq97r7JRi0cRSs8gaAY/E8wCJRqoaBzk/1emcFb LQ6VaFPRNBpxuX0osBJSrJTwsKKn+JpDwEWtMX40JaEYDJlV6qBZtOI2lmDujMAoyRSf Qx4aBgG8ZEc00WT7n0SZxbmvFl8m2hSt9E86q1auOXIZFgX9fUeI6OIRH6FlDOFE1mX2 XedBPYZnNo0fzEVdPEt13enAy+PEP4wEDtvk05IIsEIeqste/4l4sYj0nUHR5FmwM6t2 Us6KwlAXzmb58A88Bi1quwk0HdLOHVblIh52tbMjBeJEiYFfaSZTulBEfVid9EZLqUlG +XPg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:from:to:cc:subject:message-id :mail-followup-to:references:mime-version:content-disposition :in-reply-to:user-agent; bh=rtMhDamtuuA+JiHrdeHtJRB6RJa7XFspH6Hxp+S6fUY=; b=grsgNRQfn9oAcJnEOykrjOckgBGOJ7YjLQgoPUYaGfLBfFGC9sG0PX/06WMhRXEoj1 sC8r/G8smpVuin00lnmry7mKHu+Ac/ErWFMKBbTtnPI++uGf+vwLUem49tgd/S7wiv8m MzirlyYlySLqLvnUFqJ/taddS3YelLS9NlO/nQkyymg/h4cnR6P1vtXD9KlOfBKk6gJ8 0RpApNRGrregEKifm1wtQLWNIG5lIhimtCOhV/lsWQYSLcSnLlrTrxEnQs1cOckbjD80 TcX89gEdFkGSrvmDcjY3V+rgUdGNbi0wP7MgjOe9wfKvMMiPpAISdf0pyDly8Kt3PFBx PyUQ== X-Gm-Message-State: ABUngvcpsU/mTg8FzZzwvrpv5fhSjPcmHHi4agIxha+VUCdFiG7qDKoFgI8SHpbyj4dMrA== X-Received: by 10.28.111.13 with SMTP id k13mr1037390wmc.132.1477581732202; Thu, 27 Oct 2016 08:22:12 -0700 (PDT) Received: from xtaz.uk (tao.xtaz.uk. [2001:8b0:fe33::10]) by smtp.gmail.com with ESMTPSA id 70sm3843631wmv.1.2016.10.27.08.22.11 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Thu, 27 Oct 2016 08:22:11 -0700 (PDT) Date: Thu, 27 Oct 2016 16:22:09 +0100 From: Matt Smith To: "Matthew D. Fuller" Cc: Mathieu Arnold , David Demelier , Don Lewis , mad@madpilot.net, freebsd-ports@freebsd.org Subject: Re: lighttpd does not pull OpenSSL dependency Message-ID: <20161027152209.GA84543@xtaz.uk> Mail-Followup-To: Matt Smith , "Matthew D. Fuller" , Mathieu Arnold , David Demelier , Don Lewis , mad@madpilot.net, freebsd-ports@freebsd.org References: <201610252214.u9PME6br070248@gw.catspoiler.org> <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org> <20161027150035.GP79735@over-yonder.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Disposition: inline In-Reply-To: <20161027150035.GP79735@over-yonder.net> User-Agent: Mutt/1.7.1 (2016-10-04) X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 27 Oct 2016 15:22:25 -0000 On Oct 27 10:00, Matthew D. Fuller wrote: >On Thu, Oct 27, 2016 at 03:05:03PM +0200 I heard the voice of >Mathieu Arnold, and lo! it spake thus: >> >> Once you install openssl from ports, the ports framework will use >> it, always. > >That is absolutely not the case since OpenSSL in base was updated to >.so.8 and ports wasn't re-bumped past it. Everything gets confused >all the time. > >https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209582 > >Even in an e.g. net/ntp rebuilt just now: > >% ldd /usr/local/sbin/ntpd | grep -E '(crypto|ssl)' > libcrypto.so.8 => /usr/local/lib/libcrypto.so.8 (0x800cea000) > libssl.so.8 => /usr/lib/libssl.so.8 (0x801ae6000) > >Just looking at a ldd through /usr/local I'm finding tons of things >that are still linking to base libcrypto. STuff from ldns, nginx, >Virtualbox, libwww, lots of X pieces... > >This makes me *EXTREMELY* nervous about upgrading _any_ systems where >I'm using ports OpenSSL to stable/11. > I don't see this on my system which is FreeBSD 11.0-STABLE #0 r307132 $ ldd /usr/local/sbin/ntpd | grep -E '(crypto|ssl)' libcrypto.so.38 => /usr/local/lib/libcrypto.so.38 (0x800cee000) libssl.so.39 => /usr/local/lib/libssl.so.39 (0x801aca000) Most likely because I have correctly declared the default version of the SSL library by putting DEFAULT_VERSIONS=ssl=libressl-devel in make.conf. Without declaring it specifically like that I wouldn't trust the system to do it automatically either. -- Matt