lighttpd does not pull OpenSSL dependency
Matthew D. Fuller
fullermd at over-yonder.net
Thu Oct 27 15:10:07 UTC 2016
On Thu, Oct 27, 2016 at 03:05:03PM +0200 I heard the voice of
Mathieu Arnold, and lo! it spake thus:
>
> Once you install openssl from ports, the ports framework will use
> it, always.
That is absolutely not the case since OpenSSL in base was updated to
.so.8 and ports wasn't re-bumped past it. Everything gets confused
all the time.
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209582
Even in an e.g. net/ntp rebuilt just now:
% ldd /usr/local/sbin/ntpd | grep -E '(crypto|ssl)'
libcrypto.so.8 => /usr/local/lib/libcrypto.so.8 (0x800cea000)
libssl.so.8 => /usr/lib/libssl.so.8 (0x801ae6000)
Just looking at a ldd through /usr/local I'm finding tons of things
that are still linking to base libcrypto. STuff from ldns, nginx,
Virtualbox, libwww, lots of X pieces...
This makes me *EXTREMELY* nervous about upgrading _any_ systems where
I'm using ports OpenSSL to stable/11.
--
Matthew Fuller (MF4839) | fullermd at over-yonder.net
Systems/Network Administrator | http://www.over-yonder.net/~fullermd/
On the Internet, nobody can hear you scream.
More information about the freebsd-ports
mailing list