From owner-freebsd-current@FreeBSD.ORG Thu Aug 24 12:07:55 2006 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A856416A4E1 for ; Thu, 24 Aug 2006 12:07:55 +0000 (UTC) (envelope-from simon@zaphod.nitro.dk) Received: from mx.nitro.dk (zarniwoop.nitro.dk [83.92.207.38]) by mx1.FreeBSD.org (Postfix) with ESMTP id 038B343D6D for ; Thu, 24 Aug 2006 12:07:49 +0000 (GMT) (envelope-from simon@zaphod.nitro.dk) Received: from zaphod.nitro.dk (unknown [192.168.3.39]) by mx.nitro.dk (Postfix) with ESMTP id 4768E32E397; Thu, 24 Aug 2006 12:07:48 +0000 (UTC) Received: by zaphod.nitro.dk (Postfix, from userid 3000) id 9A03011435; Thu, 24 Aug 2006 14:07:47 +0200 (CEST) Date: Thu, 24 Aug 2006 14:07:47 +0200 From: "Simon L. Nielsen" To: Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?= Message-ID: <20060824120745.GE1077@zaphod.nitro.dk> References: <44E9582C.2010400@rsu.ru> <44EAA213.6010507@delphij.net> <002901c6c5ba$628b67d0$9800a8c0@carrera> <86hd0423zk.fsf@xps.des.no> <44EB302A.7010106@rsu.ru> <20060823121157.yawh6f8e844w4osc@netchild.homeip.net> <86u043znbz.fsf@xps.des.no> Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <86u043znbz.fsf@xps.des.no> User-Agent: Mutt/1.5.11 Cc: freebsd-current@freebsd.org Subject: Re: OpenSSL ports/base magic [was: [HEADS UP]: OpenLDAP+nss_ldap+nss_modules separated patch and more (SoC)] X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Aug 2006 12:07:55 -0000 On 2006.08.23 13:46:40 +0200, Dag-Erling Smørgrav wrote: > Alexander Leidinger writes: > > Michael Bushkov writes:(from Tue, 22 Aug 2006 > > > So, after all, I'd prefer to leave libldap (and nss_ldap, which can > > > also conflict with PADL's nss_ldap) as is and let users use > > > WITHOUT_LDAP and WITHOUT_NSS_LDAP when appropriate. > > If someone doesn't like the base system libldap, but wants the > > nss_ldap stuff, this way will not work out. While building the base > > system, no 3rd party libs are known to the build infrastructure. > > Wrong. It is already possible in today's tree to build the base > system's Kerberos with OpenLDAP support using the OpenLDAP port, and > there are similar provisions for using OpenSSL from ports. I know there are some magic in ports/ to use the ports version of OpenSSL, but I don't think there is anything done to support this in the base system, or have I missed that? (I'm interested as OpenSSL base system janitor to try to make sure I don't break something in the future by accident :-) ). -- Simon L. Nielsen