From owner-freebsd-ports Fri Mar 21 22:35:24 2003 Delivered-To: freebsd-ports@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8437837B401 for ; Fri, 21 Mar 2003 22:35:21 -0800 (PST) Received: from net2.dinoex.sub.org (net2.dinoex.de [212.184.201.182]) by mx1.FreeBSD.org (Postfix) with ESMTP id CB2BE43FAF for ; Fri, 21 Mar 2003 22:35:18 -0800 (PST) (envelope-from dirk.meyer@dinoex.sub.org) Received: from net2.dinoex.sub.org (dinoex@net2.dinoex.de [212.184.201.182]) by net2.dinoex.sub.org (8.12.8/8.12.8) with ESMTP id h2M6Z6hG015436; Sat, 22 Mar 2003 07:35:09 +0100 (CET) (envelope-from dirk.meyer@dinoex.sub.org) X-Authentication-Warning: net2.dinoex.sub.org: Host dinoex@net2.dinoex.de [212.184.201.182] claimed to be net2.dinoex.sub.org Received: from gate.dinoex.sub.org (dinoex@localhost) by net2.dinoex.sub.org (8.12.8/8.12.8/Submit) with BSMTP id h2M6Z55V015429; Sat, 22 Mar 2003 07:35:05 +0100 (CET) (envelope-from dirk.meyer@dinoex.sub.org) To: freebsd-ports@FreeBSD.ORG, dsilver@urchin.com (Doug Silver) Message-ID: From: dirk.meyer@dinoex.sub.org (Dirk Meyer) Organization: privat Subject: Re: Clarification on ports openssl Date: Sat, 22 Mar 2003 07:34:00 +0100 X-Mailer: Dinoex 1.79 References: <200303211533.58366.dsilver@urchin.com> X-Gateway: ZCONNECT gate.dinoex.sub.org [UNIX/Connect 0.94] X-Accept-Language: de,en X-PGP-Fingerprint: 44 16 EC 0A D3 3A 4F 28 8A 8A 47 93 F1 CF 2F 12 X-Noad: Please don't send me ad's by mail. I'm bored by this type of mail. X-Copyright: (C) Copyright 2001 by Dirk Meyer -- All rights reserved. X-Note: sending SPAM is a violation of both german and US law and will at least trigger a complaint at your provider's postmaster. X-PGP-Key-Avail: mailto:pgp-public-keys@keys.de.pgp.net Subject:GET 0x331CDA5D X-No-Archive: yes X-ZC-VIA: 20030322000000W+1@dinoex.sub.org Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Doug Silver wrote:, > I have the latest openssl port installed and the following in make.conf but it > seemed to get ignored during the build: > [mod_php4]# egrep -i openssl /etc/make.conf > USE_OPENSSL_PORT=yes fine ... valid > OPENSSLBASE= /usr/local > OPENSSLDIR= /usr/local/etc/ssl This settings are overritten bye the Makefiles. > So I forced the issue: > However even that doesn't seem to work: > [snip from end of "make" ] > /usr/local/lib/libc-client4.so: warning: tmpnam() possibly used unsafely; > consider using mkstemp() > /usr/libexec/elf/ld: warning: libcrypto.so.2, needed by > /usr/local/lib/libc-client4.so, may conflict with libcrypto.so.3 yes, you need all libs to be build against the same version of openssl. > I realize the cclient is the problem, but beyond hacking the code to link > libcrypto to /usr/local I wanted to check here first. Am I missing something > that should be set in /etc/make.conf or elsewhere? I see from a January > thread that Dirk wrote: > Subject: Re: USE_OPENSSL and openssl from ports... > right... > > USE_OPENSSL is defunct, see PR from June 2002: > http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/39054 No comment has been made on this problem... only CURRENT and STABLE users don't suffer from it. > But from that PR it seems like there should be a Mk/bsd.openssl.mk file, or > perhaps it was merged into the main bsd.port.mk? Even so, how should the > openssl port be maintened so other ports link against it instead of the base > one? I hope the answer isn't to overwrite the base ;) unless bsd.port.mk can be changed, you have to modify the makefiles in the ports you use. you have to fix all ports. Remove the line: USE_OPENSSL= yes and add later (after bsd.pre.mk): .include "${PORTSDIR}/security/openssl/Makefile.ssl" See for examples the ports: /usr/ports/ftp/curl/Makefile /usr/ports/mail/pantomime-ssl/Makefile /usr/ports/mail/sendmail/Makefile /usr/ports/mail/sendmail-old/Makefile /usr/ports/net/bind9-dlz/Makefile /usr/ports/news/suck/Makefile /usr/ports/security/openssh/Makefile /usr/ports/security/openssh-portable/Makefile /usr/ports/security/openssl/Makefile.ssl /usr/ports/www/apache13-modssl/Makefile /usr/ports/www/apache13-ssl/Makefile The easy way is to apply thsi patch kind regards Dirk - Dirk Meyer, Im Grund 4, 34317 Habichtswald, Germany - [dirk.meyer@dinoex.sub.org],[dirk.meyer@guug.de],[dinoex@FreeBSD.org] Index: bsd.port.mk =================================================================== RCS file: /home/pcvs/ports/Mk/bsd.port.mk,v retrieving revision 1.444 diff -u -r1.444 bsd.port.mk --- bsd.port.mk 22 Mar 2003 04:45:24 -0000 1.444 +++ bsd.port.mk 22 Mar 2003 06:33:30 -0000 @@ -927,45 +927,7 @@ .endif # !defined(PERL_LEVEL) && defined(PERL_VERSION) .if defined(USE_OPENSSL) -.if ${OSVERSION} >= 400014 -.if !exists(/usr/lib/libcrypto.so) -.BEGIN: - @${ECHO_CMD} "This port requires the OpenSSL library, which is part of" - @${ECHO_CMD} "the FreeBSD crypto distribution but not installed on your" - @${ECHO_CMD} "machine. Please see the \"OpenSSL\" section in the handbook" - @${ECHO_CMD} "(at \"http://www.FreeBSD.org/doc/en_US.ISO8859-1/books/handbook/openssl.html\", for instance)" - @${ECHO_CMD} "for instructions on how to obtain and install the FreeBSD" - @${ECHO_CMD} "OpenSSL distribution." - @${FALSE} -.else -OPENSSLBASE= /usr -OPENSSLDIR= /etc/ssl -# OpenSSL in the base system may not include IDEA for patent licensing reasons. -.if defined(MAKE_IDEA) && !defined(OPENSSL_IDEA) -OPENSSL_IDEA= ${MAKE_IDEA} -.else -OPENSSL_IDEA?= NO -.endif -.if ${OPENSSL_IDEA} == "NO" -# XXX This is a hack to work around the fact that /etc/make.conf clobbers -# our CFLAGS. It might not be enough for all future ports. -.if defined(HAS_CONFIGURE) -CFLAGS+= -DNO_IDEA -.else -OPENSSL_CFLAGS+=-DNO_IDEA -.endif -MAKE_ARGS+= OPENSSL_CFLAGS="${OPENSSL_CFLAGS}" -.endif -.endif -.else -LIB_DEPENDS+= crypto.2:${PORTSDIR}/security/openssl -OPENSSLBASE?= ${LOCALBASE} -OPENSSLDIR?= ${OPENSSLBASE}/openssl -.endif -OPENSSLLIB= ${OPENSSLBASE}/lib -OPENSSLINC= ${OPENSSLBASE}/include -MAKE_ENV+= OPENSSLLIB=${OPENSSLLIB} OPENSSLINC=${OPENSSLINC} \ - OPENSSLBASE=${OPENSSLBASE} OPENSSLDIR=${OPENSSLDIR} +.include "${PORTSDIR}/security/Makefile.ssl" .endif .if defined(EMACS_PORT_NAME) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message