From owner-freebsd-current@freebsd.org Sat Oct 13 02:58:49 2018 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D8E6110D6059 for ; Sat, 13 Oct 2018 02:58:49 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from smtp-out-no.shaw.ca (smtp-out-no.shaw.ca [64.59.134.9]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 3729B837BA; Sat, 13 Oct 2018 02:58:48 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from spqr.komquats.com ([70.67.125.17]) by shaw.ca with ESMTPA id BA8VgojOtK9FDBA8WgOpvw; Fri, 12 Oct 2018 20:58:41 -0600 X-Authority-Analysis: v=2.3 cv=Gvz2BX9C c=1 sm=1 tr=0 a=VFtTW3WuZNDh6VkGe7fA3g==:117 a=VFtTW3WuZNDh6VkGe7fA3g==:17 a=kj9zAlcOel0A:10 a=smKx5t2vBNcA:10 a=6I5d2MoRAAAA:8 a=YxBL1-UpAAAA:8 a=qoDfrK5cHIIXnjfGSScA:9 a=CjuIK1q_8ugA:10 a=IjZwj45LgO3ly-622nXo:22 a=Ia-lj3WSrqcvXOmTRaiG:22 Received: from slippy.cwsent.com (slippy8 [10.2.2.6]) by spqr.komquats.com (Postfix) with ESMTPS id 106D812F6; Fri, 12 Oct 2018 19:58:38 -0700 (PDT) Received: from slippy.cwsent.com (localhost [127.0.0.1]) by slippy.cwsent.com (8.15.2/8.15.2) with ESMTP id w9D2wcYP042895; Fri, 12 Oct 2018 19:58:38 -0700 (PDT) (envelope-from Cy.Schubert@cschubert.com) Received: from slippy (cy@localhost) by slippy.cwsent.com (8.15.2/8.15.2/Submit) with ESMTP id w9D2wbIh042892; Fri, 12 Oct 2018 19:58:38 -0700 (PDT) (envelope-from Cy.Schubert@cschubert.com) Message-Id: <201810130258.w9D2wbIh042892@slippy.cwsent.com> X-Authentication-Warning: slippy.cwsent.com: cy owned process doing -bs X-Mailer: exmh version 2.8.0 04/21/2012 with nmh-1.7.1 Reply-to: Cy Schubert From: Cy Schubert X-os: FreeBSD X-Sender: cy@cwsent.com X-URL: http://www.cschubert.com/ To: Don Lewis cc: FreeBSD current , re@FreeBSD.org Subject: Re: OpenSSL 1.1.1 libssl.so version number In-Reply-To: Message from Don Lewis of "Fri, 12 Oct 2018 16:56:54 -0700." Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 12 Oct 2018 19:58:37 -0700 X-CMAE-Envelope: MS4wfDN+tjZDqgpywt681jdFAk0B5G6BJgspgTUcdGHiM6kq6nmX2camgYzBneWpH3FQr5TS9V3odfhLdQQ6WL3iEf/A4oXyXbRhsIM2bg6jGQXFqO/H9g7u 2qbBk8GVeCgLsQInmGJNO9nyzrfWHYXvSIe5O2Jq0D9B6cEqmbbWa6axCIZdHoUmLk9q/H1e9Lqnmm4MTJ+TcnQ5V3qRJQb8tVCNNyitSAWMAtGXsUMNhV88 MOi7pseJJUhKDPC5sTc9gw== X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Oct 2018 02:58:50 -0000 In message , Don Lewis writes: > Prior to the OpenSSL 1.1.1 import, the base OpenSSL library was > /usr/lib/libssl.so.8. The security/openssl port (1.0.2p) installed > ${LOCALBASE}/lib/ilbssl.so.9 and the security/openssl-devel port > (1.1.0i) installed ${LOCALBASE}/lib/libssl.so.11. After the import, the > base OpenSSL library is /usr/lib/libssl.so.9. Now if you build ports > with DEFAULT_VERSIONS+=ssl=openssl, the library that actually gets used > is ambiguous because there are now two different versions of libssl.so > (1.0.2p and 1.1.1) with the same shared library version number. > > I stumbled across this when debugging a virtualbox-ose configure > failure. The test executable was linked to the ports version of > libssl.so but rtld chose the base libssl.so at run time. This is also the issue with ports-mgmt/pkg on a system that still requires OpenSSL 1.0.2 from ports in order to support an old client. cwfw# pkg info ld-elf.so.1: /usr/local/lib/libcrypto.so.9: version OPENSSL_1_1_0 required by /usr/local/lib/libpkg.so.4 not defined cwfw# If I remove security/openssl, the above issue is resolved however the old client, which should be replaced next year, fails to communicate with the server. The classic rock & a hard place scenario. -- Cheers, Cy Schubert FreeBSD UNIX: Web: http://www.FreeBSD.org The need of the many outweighs the greed of the few.