Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 08 Apr 2015 21:38:01 -0500
From:      Bryan Drewery <bdrewery@FreeBSD.org>
To:        Christian Weisgerber <naddy@mips.inka.de>, freebsd-ports@freebsd.org
Subject:   Re: LibreSSL infects ports, causes problems
Message-ID:  <5525E609.70402@FreeBSD.org>
In-Reply-To: <slrnmib1ur.2jau.naddy@lorvorc.mips.inka.de>
References:  <slrnmib1ur.2jau.naddy@lorvorc.mips.inka.de>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--d63j9GCCJ4dUVUR2LrTPEUsumeT5xKhNo
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

On 4/8/2015 2:56 PM, Christian Weisgerber wrote:
> It looks like our already complicated situation with base OpenSSL
> and ports OpenSSL got even messier with the addition of LibreSSL.
> I recently installed security/libressl for the pending net/openntpd
> update (*).  Now when I try to pkg delete it again, I get this:
>=20
> Installed packages to be REMOVED:
>         libressl-2.1.6
>         openntpd-5.7p4,2
>         xorg-server-1.14.7_4,1
>         git-lite-2.3.5
>         mutt-1.5.23_8
>         xf86-video-mach64-6.9.4_5
>         xf86-video-nv-2.1.20_6
>         xf86-video-openchrome-0.3.3_5
>         xf86-video-r128-6.9.2_5
>         xf86-video-vesa-2.3.3_5
>         xf86-input-keyboard-1.8.0_7
>         xf86-input-mouse-1.9.0_6
>         xf86-video-ati-7.5.0_2
>         xf86-video-intel-2.21.15_7
>         xorg-drivers-7.7_3
>         xorg-7.7_2
>=20
> Obviously LibreSSL has "infected" various other ports that happened
> to be recompiled while it was installed on the system.  I'm glad
> that pkg(1) detects this, but the situation is certainly a surprise.
> Why did I want to remove LibreSSL, you ask?  Because lang/python27
> also picks it up, fails to build the _ssl module due to a missing
> RAND_egd(), and finally errors out on install.
>=20
>=20
> *) There is an interoperability problem with LibreSSL and ca_root_nss,
>    which causes OpenNTPD's new https constraints feature to fail, which=

>    is why I haven't updated the net/openntpd yet.
>=20

Are you mixing ports and packages?

--=20
Regards,
Bryan Drewery


--d63j9GCCJ4dUVUR2LrTPEUsumeT5xKhNo
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJVJeYJAAoJEDXXcbtuRpfPDGgIAJFieug+9OxcXuDw1pXV256L
Y69kSf+PAxs3tupGnQrdpIPD/MRUk8thJA1T8swyakOmpiP6OaFzpjodkTEFzrz8
bb/smKgaeQq1dMtGwEbrx2FPZRPE+r6DTTaqiBQrP2DcU0T5JDsq0bDaoILAz22R
XOzh5KKbMhepcduZiw5A2QxWOz6cMFR7vEAdCzyP/BaO9g7Kh+LXGaViR9oe/7Fa
lUlYYr489AzB2NDBA87ikTKOdm5yYpyhptmR0DSTUs3YRnip07x+AMhwg+d2o8PU
8+bvnaeRKnbOUeckHwubZcWAv/bXcQZXtTQSc+hQ32z1LEX2VFVnrUiKFPq+7CA=
=n2RI
-----END PGP SIGNATURE-----

--d63j9GCCJ4dUVUR2LrTPEUsumeT5xKhNo--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5525E609.70402>