From owner-freebsd-ports@FreeBSD.ORG Thu May 1 16:12:00 2014 Return-Path: Delivered-To: freebsd-ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id EBBA11F0; Thu, 1 May 2014 16:12:00 +0000 (UTC) Received: from c01.escapebox.net (c01.escapebox.net [87.230.55.75]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9F16D1CD2; Thu, 1 May 2014 16:12:00 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=geminix.org; s=g01; h=Content-Transfer-Encoding:Content-Type:In-Reply-To:References:Subject:CC:To:MIME-Version:From:Date:Message-ID; bh=fM0FfFfbx8BQl6JgfLP8/ZOqYKzcmlWGr+T836i/M+w=; b=oYZPtBjbT5UROW+6IWyR+OH0QdCt5Howb1lgjfq01hiwR0V/iUbfytEWtqCn40mB51whEOOgYCWKoHWQDHuhRr4o/GwTvkBD9B2vDugcXRwzyGGrIgPPjBHyB6jOCPKf+AoP2NkOiNeVZH6h5A4izfyQV15yXyhRElvDsqPrIBs=; Received: from user.n01.escapebox.net ([fd45:7d86:a5ba::3b] ident=mailnull) by repo.n01.escapebox.net with esmtp (Exim 4.82 (FreeBSD)) (envelope-from ) id 1WftaY-0003tR-5f; Thu, 01 May 2014 18:11:58 +0200 Message-ID: <5362725B.6010109@geminix.org> Date: Thu, 01 May 2014 18:12:11 +0200 From: Uwe Doering Organization: Private UNIX Site User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Paul Hoffman Subject: Re: ports requiring OpenSSL not honouring OpenSSL from ports References: <201404271508.s3RF8sMA014085@catnip.dyslexicfish.net> <201404272250.s3RMo2NZ095771@catnip.dyslexicfish.net> <445CDD31-5A11-4F5E-92DE-CB11A10E9BDE@odo.in-berlin.de> <5361896C.7010703@bluerosetech.com> <53621BE0.4040704@geminix.org> <15864901-C372-43A8-A6E6-BF0AF73F2EC6@vpnc.org> <536267A0.9010403@geminix.org> In-Reply-To: <536267A0.9010403@geminix.org> X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Received: from gemini by user.n01.escapebox.net with esmtpa (Exim 4.82 (FreeBSD)) (envelope-from ) id 1WftaY-0003tL-2j; Thu, 01 May 2014 18:11:58 +0200 Cc: freebsd-security@freebsd.org, "freebsd-ports@freebsd.org" X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 May 2014 16:12:01 -0000 On 01.05.14 17:26, Uwe Doering wrote: > On 01.05.14 16:33, Paul Hoffman wrote: >> On May 1, 2014, at 3:03 AM, Uwe Doering wrote: >> >>> I indeed wondered why this variable hadn't been mentioned so far. Guys, >>> you do have "WITH_OPENSSL_PORT=yes" in your "/etc/make.conf", haven't you? >>> >>> Because otherwise the whole thread might be considered a false alert. >>> The ports system does not link with the ports' OpenSSL of its own >>> accord. Or at least not in a reliable/predictable manner. You have to >>> explicitly tell it what you want. >> >> Please consider whether it is appropriate to chide people for not knowing about an *undocumented* feature of make.conf. > > First of all, I certainly didn't intend to chide anyone, so I apologize > if some of you got the impression. Having worked with FreeBSD and the > ports system for years I was under the impression that this information > would be readily available in the docs. > > But on further research it appears to me that this is indeed pretty well > hidden in only some mailing list and forum articles, where I probably > learned it from in the past. > [...] One additional data point: "WITH_OPENSSL_PORT" is mentioned in the FreeBSD Porter's Handbook: http://www.freebsd.org/doc/en_US.ISO8859-1/books/porters-handbook/makefile-options.html#idp67984816 But then, it cannot be expected that mere _users_ of the ports tree read the Porter's Handbook. And it is also not mentioned there that it is, to my knowledge, considered good practice to have that setting in "/etc/make.conf" in order to avoid any confusion about which port is linked with what version of OpenSSL. Best regards, Uwe -- Uwe Doering gemini@geminix.org