From owner-freebsd-current@freebsd.org Fri Oct 12 05:49:02 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id EFD9C10D4054 for ; Fri, 12 Oct 2018 05:49:01 +0000 (UTC) (envelope-from FreeBSD@shaneware.biz) Received: from ipmail03.adl2.internode.on.net (ipmail03.adl2.internode.on.net [150.101.137.141]) by mx1.freebsd.org (Postfix) with ESMTP id DEF2F735ED; Fri, 12 Oct 2018 05:49:00 +0000 (UTC) (envelope-from FreeBSD@shaneware.biz) Received: from unknown (HELO leader.local) ([118.211.7.250]) by ipmail03.adl2.internode.on.net with ESMTP; 12 Oct 2018 16:13:50 +1030 Subject: Re: HEADS-UP: OpenSSL 1.1.1 in 12.0 To: Glen Barber , freebsd-current@freebsd.org References: <20181009213425.GG61558@FreeBSD.org> From: Shane Ambler Message-ID: <6477eff7-3512-13ec-13cf-9769d80d77ee@ShaneWare.Biz> Date: Fri, 12 Oct 2018 16:13:45 +1030 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:60.0) Gecko/20100101 Thunderbird/60.0 MIME-Version: 1.0 In-Reply-To: <20181009213425.GG61558@FreeBSD.org> Content-Type: text/plain; charset=utf-8 Content-Language: en-AU Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Oct 2018 05:49:02 -0000 On 10/10/18 8:04 am, Glen Barber wrote: > OpenSSL has been updated to version 1.1.1 as of r339270. > > It is important to rebuild third-party packages before running: > > # make -C /usr/src delete-old && make -C /usr/src delete-old-libs > > Thank you for your patience while this work was in progress, and thank > you to all involved for their hard work in getting things ready for this > update. > > Glen > I have a host running 11-stable and use bhyve to run current for testing, zfs says the volume for this bhyve was created 12/2016 Within the bhyve host - base and poudriere jails are built to r339301 Installed ports have been manually re-built in ports tree poudriere runs and builds ports OK but at the end it fails to create pkg repo with failing to load cert. This is the cert I have been using for my pkg repos for some years, do these pkg certs need to be updated after this update? It does work if I disable the signing key. [00:01:43] Creating pkg repository Creating repository in /tmp/packages: 100% Packing files for repository: 0% pkg-static: can't load key from /tmp/repo.key Packing files for repository: 100% [00:01:44] Cleaning up [00:01:44] Unmounting file systems -- FreeBSD - the place to B...Software Developing Shane Ambler