From owner-svn-src-head@freebsd.org Tue Mar 3 16:02:30 2020 Return-Path: Delivered-To: svn-src-head@mailman.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.nyi.freebsd.org (Postfix) with ESMTP id 049472546DA for ; Tue, 3 Mar 2020 16:02:30 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from smtp-out-so.shaw.ca (smtp-out-so.shaw.ca [64.59.136.139]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "Client", Issuer "CA" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 48X1xK3c8jz421l; Tue, 3 Mar 2020 16:02:29 +0000 (UTC) (envelope-from cy.schubert@cschubert.com) Received: from spqr.komquats.com ([70.67.125.17]) by shaw.ca with ESMTPA id 9A00jjcFc17ZD9A02jm9HV; Tue, 03 Mar 2020 09:02:27 -0700 X-Authority-Analysis: v=2.3 cv=ZsqT1OzG c=1 sm=1 tr=0 a=VFtTW3WuZNDh6VkGe7fA3g==:117 a=VFtTW3WuZNDh6VkGe7fA3g==:17 a=jpOVt7BSZ2e4Z31A5e1TngXxSK0=:19 a=IkcTkHD0fZMA:10 a=SS2py6AdgQ4A:10 a=6I5d2MoRAAAA:8 a=YxBL1-UpAAAA:8 a=7jdmSYDpkge7-4_8-yIA:9 a=QEXdDO2ut3YA:10 a=IjZwj45LgO3ly-622nXo:22 a=Ia-lj3WSrqcvXOmTRaiG:22 Received: from Resas-iPad.esitwifi.local (S0106788a207e2972.gv.shawcable.net [70.66.154.233]) by spqr.komquats.com (Postfix) with ESMTPSA id BBECC1FE; Tue, 3 Mar 2020 08:02:23 -0800 (PST) Date: Tue, 03 Mar 2020 06:48:43 -0800 User-Agent: K-9 Mail for Android In-Reply-To: <20200303.075047.1159550404273266246.hrs@FreeBSD.org> References: <34373b64-876b-c97c-e805-ffaf3a69dd8b@grosbein.net> <8e60a869-fe1e-9314-ffdc-76ed3e2dc081@FreeBSD.org> <20200303.075047.1159550404273266246.hrs@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Subject: Re: svn commit: r358411 - head/contrib/sendmail/src To: Hiroki Sato ,eugen@grosbein.net,jkim@FreeBSD.org CC: ume@FreeBSD.org,src-committers@freebsd.org,svn-src-head@freebsd.org From: Cy Schubert Message-ID: <0B5BF068-6E2E-48D5-BF68-1A007EBFE9D9@cschubert.com> X-CMAE-Envelope: MS4wfH+oynYUaFOv42n2qZj/jv4VVKKr6K8KeGgYWypZS617sUTaNrbTkAT/gd/6YwSxi4l3pR7pEBrXs6EnDpLfuAz7qh05u9tpwAiOEf1a7AU2R733DuGu ruDis5zd43ZREP0tMX7Ec3pMnkkMnBuHvUEWu7+H8PeoylZtJP0FDhNjR9wmj4bm2Gj7QY0bRDp09PjnnKsO9Nrp38NNEBoRcnXqgqnCrZ6uR+eULZ4d4i8T w/bNx9NqtWR0HhzxHzQyW4h08AZTRoRqUCycg2FgeO4+xbSOTDNaSdkkija5M4nPGosDlxlid4VgqNpU9BJRvgLhh58QZ3Vo7VG0JeoyDR0= X-Rspamd-Queue-Id: 48X1xK3c8jz421l X-Spamd-Bar: ----- Authentication-Results: mx1.freebsd.org; none X-Spamd-Result: default: False [-5.97 / 15.00]; NEURAL_HAM_MEDIUM(-0.97)[-0.971,0]; REPLY(-4.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000,0] X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Mar 2020 16:02:30 -0000 On March 2, 2020 2:50:47 PM PST, Hiroki Sato wrote: >Jung-uk Kim wrote > in <8e60a869-fe1e-9314-ffdc-76ed3e2dc081@FreeBSD=2Eorg>: > >jk> > I merely try to understand how to unbreak upgrade path for >11=2E2-STABLE workstations >jk> > with stock sendmail and SSL support that also has many ports >installed including >jk> > ports requiring new openssl API=2E Because buildworld fails and >upgrade is broken=2E >jk> I am also trying to understand your problem=2E Which port is >specifically >jk> requiring new OpenSSL API for you? > > The problem eugen@ is trying to explain is (correct me if this is > wrong): > > 1=2E One needs to install OpenSSL from ports if she wants to install > software which depends on it=2E deskutils/nextcloudclient, for > example=2E Setting DEFAILT_VERSION+=3Dssl=3Dopenssl is strongly > recommended in this case for consistency=2E > >2=2E Handbook says enabling SMTP AUTH requires the following in >make=2Econf: > > SENDMAIL_CFLAGS=3D-I/usr/local/include/sasl -DSASL > SENDMAIL_LDFLAGS=3D-L/usr/local/lib > SENDMAIL_LDADD=3D-lsasl2 > > However, this variables make the buildworld target to pick up > OpenSSL from ports if installed, not from base, in the middle of > building sendmail=2E "make buildworld" will always fail=2E There is > no way to avoid OpenSSL from ports if she wants software such as > deskutils/nextcloudclient=2E > > This build breakage occurs with sendmail + openssl from ports, not > related to cyrus-sasl2=2E A shlib mismatch between sendmail and > cyrus-sasl2 in terms of OpenSSL library is another issue=2E > > I think there are several workaround, but the primary problem is that > people can get confused with instructions in the handbook=2E I suggest > to update the handbook: > > a) If you do not have security/openssl on your system, set the > following in make=2Econf and rebuilt the world: > > SENDMAIL_CFLAGS=3D-I/usr/local/include/sasl -DSASL > SENDMAIL_LDFLAGS=3D-L/usr/local/lib > SENDMAIL_LDADD=3D-lsasl2 > > b) If you have security/openssl, sendmail in the base system does not > support SMTP AUTH because of incompatibility with the newer > versions of OpenSSL=2E Use mail/sendmail from ports=2E > > I still feel that b) is sub-optimal, but it would be too complex to > make them coexist with each other=2E The attached patch and putting > SASLBASEDIR=3D/usr/local into /etc/make=2Econf instead of the SENDMAIL_* > variables should mitigate the first problem but if > security/cyrus-sasl2 was built with OpenSSL from ports, the shlib > mismatch still occurs=2E > >-- Hiroki Buildworld should only use libraries in /usr/obj=2E I've found and fixed t= hese in ntp, Heimdal and amd=2E Base sendmail build shouldn't use installed= libraries or headers=2E The implications are obvious=2E=20 --=20 Pardon the typos and autocorrect, small keyboard in use=2E=20 Cy Schubert FreeBSD UNIX: Web: https://www=2EFreeBSD=2Eorg The need of the many outweighs the greed of the few=2E Sent from my Android device with K-9 Mail=2E Please excuse my brevity=2E