Date: Thu, 27 Oct 2016 16:22:09 +0100 From: Matt Smith <matt.xtaz@gmail.com> To: "Matthew D. Fuller" <fullermd@over-yonder.net> Cc: Mathieu Arnold <mat@FreeBSD.org>, David Demelier <demelier.david@gmail.com>, Don Lewis <truckman@freebsd.org>, mad@madpilot.net, freebsd-ports@freebsd.org Subject: Re: lighttpd does not pull OpenSSL dependency Message-ID: <20161027152209.GA84543@xtaz.uk> In-Reply-To: <20161027150035.GP79735@over-yonder.net> References: <201610252214.u9PME6br070248@gw.catspoiler.org> <ded708c9-f2bf-6b2f-84cf-f97f91c39888@FreeBSD.org> <CAO%2BPfDdXbbgVMZnxiJig%2B_drLNYRftD4ruqXxHpybztiR1eBAA@mail.gmail.com> <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org> <CAO%2BPfDdJ7wv-rzrX7bTRhfY1W_qcL3%2BgZthqy-aq0sqYhDVcgg@mail.gmail.com> <bd8cf64a-7c04-d58b-b9ab-1abbb4cc062b@FreeBSD.org> <20161027150035.GP79735@over-yonder.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Oct 27 10:00, Matthew D. Fuller wrote: >On Thu, Oct 27, 2016 at 03:05:03PM +0200 I heard the voice of >Mathieu Arnold, and lo! it spake thus: >> >> Once you install openssl from ports, the ports framework will use >> it, always. > >That is absolutely not the case since OpenSSL in base was updated to >.so.8 and ports wasn't re-bumped past it. Everything gets confused >all the time. > >https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209582 > >Even in an e.g. net/ntp rebuilt just now: > >% ldd /usr/local/sbin/ntpd | grep -E '(crypto|ssl)' > libcrypto.so.8 => /usr/local/lib/libcrypto.so.8 (0x800cea000) > libssl.so.8 => /usr/lib/libssl.so.8 (0x801ae6000) > >Just looking at a ldd through /usr/local I'm finding tons of things >that are still linking to base libcrypto. STuff from ldns, nginx, >Virtualbox, libwww, lots of X pieces... > >This makes me *EXTREMELY* nervous about upgrading _any_ systems where >I'm using ports OpenSSL to stable/11. > I don't see this on my system which is FreeBSD 11.0-STABLE #0 r307132 $ ldd /usr/local/sbin/ntpd | grep -E '(crypto|ssl)' libcrypto.so.38 => /usr/local/lib/libcrypto.so.38 (0x800cee000) libssl.so.39 => /usr/local/lib/libssl.so.39 (0x801aca000) Most likely because I have correctly declared the default version of the SSL library by putting DEFAULT_VERSIONS=ssl=libressl-devel in make.conf. Without declaring it specifically like that I wouldn't trust the system to do it automatically either. -- Matt
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20161027152209.GA84543>