From owner-freebsd-ports@FreeBSD.ORG Mon Mar 9 01:19:03 2015 Return-Path: Delivered-To: ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BDAAB5CC for ; Mon, 9 Mar 2015 01:19:03 +0000 (UTC) Received: from ipmail06.adl6.internode.on.net (ipmail06.adl6.internode.on.net [150.101.137.145]) by mx1.freebsd.org (Postfix) with ESMTP id 4C1821F5 for ; Mon, 9 Mar 2015 01:19:02 +0000 (UTC) Received: from ppp118-210-136-81.lns20.adl6.internode.on.net (HELO leader.local) ([118.210.136.81]) by ipmail06.adl6.internode.on.net with ESMTP; 09 Mar 2015 11:43:53 +1030 Message-ID: <54FCF3CB.2010301@ShaneWare.Biz> Date: Mon, 09 Mar 2015 11:43:47 +1030 From: Shane Ambler User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.4.0 MIME-Version: 1.0 To: Adam Weinberger , ports@FreeBSD.org Subject: Re: WITH_OPENSSL_PORT documentation References: In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Mar 2015 01:19:03 -0000 On 09/03/2015 05:54, Adam Weinberger wrote: > Can somebody please write something---anything, even 2 > sentences---for the PHB about how to use WITH_OPENSSL_PORT? What > users should set it to to get LibreSSL for example, and what porters > are supposed to put in the Makefile to support it? > > The text at the top of bsd.openssl.mk just shows > WITH_OPENSSL_PORT=yes. A few sentences would be a big help, and I'm > sure the doc people would be happy to take care of all the markup and > formatting for you. > > # Adam I looked at it a few of days ago and didn't think there was an issue. bsd.openssl.mk has - # Use of 'USE_OPENSSL=yes' includes this Makefile after bsd.ports.pre.mk # # the user/port can now set this options in the makefiles. # # WITH_OPENSSL_BASE=yes - Use the version in the base system. # WITH_OPENSSL_PORT=yes - Use the OpenSSL port, even if base is up to date # # USE_OPENSSL_RPATH=yes - Pass RFLAGS options in CFLAGS, # needed for ports who don't use LDFLAGS # # Overrideable defaults: # # OPENSSL_SHLIBVER= 8 # OPENSSL_PORT= security/openssl If you specifically want to use the base or port ssl you set either WITH_OPENSSL_BASE=yes or WITH_OPENSSL_PORT=yes. If you want a specific ssl variation you can set OPENSSL_PORT to the port you want to use. The default is security/openssl So if you want to use libressl then you set WITH_OPENSSL_PORT=yes and OPENSSL_PORT=security/libressl Porters should put USE_OPENSSL=yes in their Makefile, other settings should only be added if necessary, leave the other options to the user. -- FreeBSD - the place to B...Securing Domains Shane Ambler