Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 Oct 2016 14:49:10 +0200
From:      David Demelier <demelier.david@gmail.com>
To:        Mathieu Arnold <mat@freebsd.org>
Cc:        Don Lewis <truckman@freebsd.org>, mad@madpilot.net, freebsd-ports@freebsd.org
Subject:   Re: lighttpd does not pull OpenSSL dependency
Message-ID:  <CAO%2BPfDdJ7wv-rzrX7bTRhfY1W_qcL3%2BgZthqy-aq0sqYhDVcgg@mail.gmail.com>
In-Reply-To: <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org>
References:  <201610252214.u9PME6br070248@gw.catspoiler.org> <ded708c9-f2bf-6b2f-84cf-f97f91c39888@FreeBSD.org> <CAO%2BPfDdXbbgVMZnxiJig%2B_drLNYRftD4ruqXxHpybztiR1eBAA@mail.gmail.com> <7fb24c94-1efa-d1b5-9028-8dec8330e543@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
2016-10-27 11:00 GMT+02:00 Mathieu Arnold <mat@freebsd.org>:
> Before changing the default, though, I need to change the way GSSAPI is
> handled, and create a DEFAULT_VERSIONS+=gssapi=<base,mit,heimdal,...>
> and change all the ports with the USES=gssapi that gives options to the
> users.
> But I don't use all of that, so I need help figuring out which should be
> the default afterwards (it can't be base, because you can't mix base
> heimdal with non base openssl)

I've just tested my lighttpd package into a fresh jail, it has not
installed openssl and the lighttpd binary was using /usr/lib/libssl
from base instead.

There is indeed something wrong then, because if I install openssl,
lighttpd will use one from /usr/local/lib which is terrible as we have
no guarantee about openssl ABI compatibility.

I don't know much linker options, but it is possible to make absolute
shared library dependency ? Like -l/usr/lib/libssl.so instead of
-lssl. Will this force lighttpd to use openssl from base?

That's what I dislike in having some software in base and also in
ports. We need to figure out that. Or the best is to avoid having too
much software in base. For example, it's nice to have ssh in base, but
I have no problem if we need to install it in the next years. This
will also have the benefits of more recent versions.

By the way, for what openssl is needed in base?

Regards,

-- 
Demelier David



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAO%2BPfDdJ7wv-rzrX7bTRhfY1W_qcL3%2BgZthqy-aq0sqYhDVcgg>