From owner-svn-ports-all@FreeBSD.ORG Mon May 4 14:32:16 2015 Return-Path: Delivered-To: svn-ports-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 40218972; Mon, 4 May 2015 14:32:16 +0000 (UTC) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 21587162C; Mon, 4 May 2015 14:32:16 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.9/8.14.9) with ESMTP id t44EWGw4045244; Mon, 4 May 2015 14:32:16 GMT (envelope-from madpilot@FreeBSD.org) Received: (from madpilot@localhost) by svn.freebsd.org (8.14.9/8.14.9/Submit) id t44EWFa2045240; Mon, 4 May 2015 14:32:15 GMT (envelope-from madpilot@FreeBSD.org) Message-Id: <201505041432.t44EWFa2045240@svn.freebsd.org> X-Authentication-Warning: svn.freebsd.org: madpilot set sender to madpilot@FreeBSD.org using -f From: Guido Falsi Date: Mon, 4 May 2015 14:32:15 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r385408 - in head: . net/pjsip X-SVN-Group: ports-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 04 May 2015 14:32:16 -0000 Author: madpilot Date: Mon May 4 14:32:15 2015 New Revision: 385408 URL: https://svnweb.freebsd.org/changeset/ports/385408 Log: Modify asterisk UPDATING entry to reflect the present situation. While here also modify misleading and stale comment in the net/pjsip port EXTSRTP option. Thanks to mat@ for making me notice these. Modified: head/UPDATING head/net/pjsip/Makefile Modified: head/UPDATING ============================================================================== --- head/UPDATING Mon May 4 14:13:01 2015 (r385407) +++ head/UPDATING Mon May 4 14:32:15 2015 (r385408) @@ -124,17 +124,25 @@ AUTHOR: ohauer@FreeBSD.org Due to conflicts between base OpenSSL and ports provided OpenSSL library, which is required by net/libsrtp, the srtp support has to be removed from the default asterisk13 port configuration, - otherwise a a not working binary would be generated. + otherwise a not working binary would be generated. - To get SRTP support working in the asterisk ports it is needed - to build all other required ports with WITH_OPENSSL_PORT=yes. For - asterisk13 it is also needed to enable the EXTSRTP option in the - pjsip port. + To get SRTP support working in the asterisk ports make sure all + dependencies are linked against the same SSL library implementation + to avoid runtime conflicts. On 10.1 everything will work fine + unless ports SSL libraries are explicitly installed. On older OS + versions(10.0 and earlier) you will need to compile all ports + with WITH_OPENSSL_PORT=yes. + + To get working SRTP support in asterisk13 with the pjsip backend + it is also needed to enable the EXTSRTP option in the pjsip port. If the CURL option is enabled also make sure the ftp/curl port - is using one of the HEIMDAL_PORT or KRB5_PORT options, otherwise - the curl module will cause asterisk to fail on startup due to - mixing calls to OpenSSL from base and from ports. + is using a GSSAPI implementation linking to the same SSL + implementation the other ports are using (BASE or NONE if you're + using base OpenSSL, GSSAPI_HEIMDAL GSSAPI_MIT otherwise). If an + incompatible option is being used the curl module will cause + asterisk to fail on startup due to mixing calls to OpenSSL from + base and from ports. 20150322: AFFECTS: Users of security/openssh-portable Modified: head/net/pjsip/Makefile ============================================================================== --- head/net/pjsip/Makefile Mon May 4 14:13:01 2015 (r385407) +++ head/net/pjsip/Makefile Mon May 4 14:32:15 2015 (r385408) @@ -40,7 +40,7 @@ SHARED_DESC= Build shared libraries (oth SPEEXAEC_DESC= Speex Acoustic Echo Canceller/AEC V4L_DESC= Video4Linux2 support YUV_DESC= Libyuv support -EXTSRTP_DESC= Use libsrtp port (needs all ports compiled with WITH_OPENSSL_PORT=yes) +EXTSRTP_DESC= Use libsrtp port (needed to get SRTP support in asterisk13 pjsip backend) OPTIONS_SUB= yes