Date: Tue, 12 May 2015 00:02:59 +0200 From: "Dr. Peter Voigt" <pvoigt@uos.de> To: Yuri <yuri@rawbw.com> Cc: freebsd-ports@freebsd.org Subject: Re: www/firefox really depends on security/openssl? Message-ID: <20150512000259.32a44ec4@kirk.drpetervoigt.private> In-Reply-To: <55510C22.9050900@rawbw.com> References: <20150509125643.0bda93e6@kirk.drpetervoigt.private> <554EEBB5.8010304@rawbw.com> <20150511202110.34e6e29c@kirk.drpetervoigt.private> <55510C22.9050900@rawbw.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 11 May 2015 13:08:02 -0700 Yuri <yuri@rawbw.com> wrote: > On 05/11/2015 11:21, Dr. Peter Voigt wrote: > > Thanks for your feedback. I have to admit that I am a bit lost with > > the referenced PR: > > Or you can just run 'pkg info -d firefox' - it doesn't show any > openssl dependencies. Running 'ldd' on elfs in firefox package also > don't show openssl. So firefox doesn't depend on OpenSSL. > OK, I currently haven't firefox installed and did not download the package to do this test myself. But your results go along with the output of "make run-depends-list". And back to my initial question: Why does "pkg install firefox" in spite of this insist on installing port openssl? > Also, you shouldn't be switching to the base OpenSSL just for one > package. The reason is, again, the conflict between the base and port > OpenSSL versions. If I were you, I would move in another direction, > and try to eliminate base OpenSSL dependency. You need to figure out > which dependency causes it. You should identify it and see if this > can be fixed. > I changed to base openssl after fighting with latest port openssl. As reported by several people https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198788 it is currently more or less impossible to build all ports cleanly against port openssl leaving you with a mixture of base and port openssl. And this makes your system as unstable that it cannot be used anymore. Most people in the referenced PR suggested to rebuild all ports against base openssl. That's want I did after a hard system crash. Since then my machine is rock stable again. Besides this port openssl had an issue with ASM=on. Peter
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150512000259.32a44ec4>