From nobody Sun Aug 10 11:32:55 2025 X-Original-To: current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4c0Fxh0vvVz64TGT for ; Sun, 10 Aug 2025 11:32:56 +0000 (UTC) (envelope-from ivy@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [96.47.72.132]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4c0Fxg73grz3CCR; Sun, 10 Aug 2025 11:32:55 +0000 (UTC) (envelope-from ivy@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1754825576; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=QpQtsv2gqAocTXouX3cpiQ2dLBx/XiPfW0lc/Jc3X3k=; b=NkVLE3AHgeSdKm5qDhBEkujKCDeZByS4OVo0AoOFdVBAbfKbUAQGSMx/HF99kL4HjOkNmB wVnGOyiRqq19dCgTFPNLxeAWe6mKNP2o9Abhz57XcVGlRr7S5N0XgILQEZ85bnMMlr6+UR TN6I4TsvZpEo6O97hMuQ8rtoEF0uXoN5cJsgUTMQEcCH9EanAkQWzJsCINrQvQSxjIaVA1 7+LVZlYvxXdIwDSkZt/gWdBrsC4itCH+KjrdakwfYfRhk8C6MGYHmcDEQT5Gqh+tkw7Q7U JNGYnnN3iZRaXNlW27rxb9Vi/mYFk7znCxDEOLI70kjJ0QtC3EcUk4PxClbcVA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1754825576; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=QpQtsv2gqAocTXouX3cpiQ2dLBx/XiPfW0lc/Jc3X3k=; b=v1dwNxvViIHzKdAQDdYUeqLDW/Wl9i1nwUD+3/QL4UUGHG/iCMJYHf4L4Dwpi4sZ/TKlaf DcN4xJv9SFQ2D8L0F1l7l+QOvKbS7CW1B7ky1IacErL0GXVXbHGDTnhNJTlnNw0JN2Mk8/ zeOsLqdOq9K1QEf4b4flz9Iu5/Kc56DRQw13kpEIWaclniFBTCF2fsDLpC6FegoxbA87Di ONTxyq+XNOgJhJm4zTmFGIgmODsmP44pRtOpZamDVwtypH8p7ygwxE95rUD+uLBn9GcSd6 68/pa7M6atELUlvrHWZwjtue8nIXs13b6tNMb8S+YU0OeRahN6dajsGDY9RMKA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1754825576; a=rsa-sha256; cv=none; b=eP6ChmLZM0xedBJ7aa6i+mzTzQY+k1rayvixIO+EPGBzttYCFjb3b9tB7zbwGr/GKxmRv1 /ZFYFAelhbDmoCSK6Uhqjsw5IDuI1srmT79xPqt2FnQS9y3sMKxyQ3pAwmZCc7ND8z6mh2 lpbJrzgJqcL2HSVbnoWIKK5T6huPe+29Yx27LhgMtjo0Td3EFBPgmtaSFLTX2r/+oyXlfc 12MWJs0HBurCznOWtAWWbeC7Fv75KpmL9U5IgqtdgpNcrX3IlYHcd17bHRKqeh8zeue1kX FmyBfLE1XuOQzqCeFrNZJrLhMOuC2nKElgE9UsOYFzZ0LX1z0hpZP3q25C3YJA== Received: by freefall.freebsd.org (Postfix, from userid 1532) id EAD9410B0; Sun, 10 Aug 2025 11:32:55 +0000 (UTC) Date: Sun, 10 Aug 2025 12:32:55 +0100 From: Lexi Winter To: Cy Schubert Cc: "Enji Cooper (yaneurabeya)" , Ian FREISLICH , FreeBSD Current , Pierre Pronchery Subject: Re: OpenSSL legacy provider is broken Message-ID: Mail-Followup-To: Cy Schubert , "Enji Cooper (yaneurabeya)" , Ian FREISLICH , FreeBSD Current , Pierre Pronchery References: <20250810060606.CD0DF147@slippy.cwsent.com> List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@FreeBSD.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Q2wvLRJhf1H6uSmE" Content-Disposition: inline In-Reply-To: <20250810060606.CD0DF147@slippy.cwsent.com> --Q2wvLRJhf1H6uSmE Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Cy Schubert: > This looks like it's due to MIT KRB5 in 15. The HEIMDAL option needs to b= e=20 > replaced with a BASE option and BASE should test for MIT KRB5 or HEIMDAL = by=20 > looking at which kdc (kdc for Heimdal or krb5kdc for MIT) is installed. no, don't do that: the kdc is an optional component that may not be installed when building ports, so you can't distinguish between base Kerberos versions that way. see https://reviews.freebsd.org/D51841 for a better way to do this. --Q2wvLRJhf1H6uSmE Content-Type: application/pgp-signature; name=signature.asc -----BEGIN PGP SIGNATURE----- iHUEABYKAB0WIQSyjTg96lp3RifySyn1nT63mIK/YAUCaJiDZAAKCRD1nT63mIK/ YM/KAP9yACYUnk8DfdHw+uS/BE/OyomnM7wLnJfNG6431EoMVgEAjq09UIetBAYk hcTKP0DRIL1CR7gYRcILuFVIZSqMaQQ= =gl+c -----END PGP SIGNATURE----- --Q2wvLRJhf1H6uSmE--