From nobody Tue May 25 06:38:43 2021 X-Original-To: perl@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id CE1D09F5EF5 for ; Tue, 25 May 2021 06:38:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Fq4D355p1z3rfQ for ; Tue, 25 May 2021 06:38:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 800E919086 for ; Tue, 25 May 2021 06:38:43 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 14P6chav057081 for ; Tue, 25 May 2021 06:38:43 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 14P6chY3057080 for perl@FreeBSD.org; Tue, 25 May 2021 06:38:43 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: perl@FreeBSD.org Subject: [Bug 256140] security/p5-Crypt-SSLeay dependency to p5-LWP-Protocol-https Date: Tue, 25 May 2021 06:38:43 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: gert@greenie.muc.de X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: perl@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback? X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter flagtypes.name Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: maintainer of a number of perl-related ports List-Archive: https://lists.freebsd.org/archives/freebsd-perl List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-perl@freebsd.org X-BeenThere: freebsd-perl@freebsd.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D256140 Bug ID: 256140 Summary: security/p5-Crypt-SSLeay dependency to p5-LWP-Protocol-https Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: Individual Port(s) Assignee: perl@FreeBSD.org Reporter: gert@greenie.muc.de Assignee: perl@FreeBSD.org Flags: maintainer-feedback?(perl@FreeBSD.org) Hi, upgrading ports/pkgs, and noted this: New packages to be INSTALLED: p5-Authen-NTLM: 1.09_1 p5-Crypt-SSLeay: 0.72_3 p5-File-Listing: 6.14 p5-HTTP-Cookies: 6.10 p5-HTTP-Negotiate: 6.01_1 p5-LWP-Protocol-https: 6.10 p5-Net-HTTP: 6.21 p5-Try-Tiny: 0.30 p5-WWW-RobotRules: 6.02_1 p5-libwww: 6.54 Installed packages to be UPGRADED: p5-DBD-mysql: 4.050 -> 4.050_1 so, upgrading p5-DBD-mysql brings in 10 new packages that are not needed otherwise on the system. I try to keep my systems as clean as possible, so= if this happens I try to find out why. The change in p5-DBD-mysql is to enable SSL by default, which activates a dependency to p5-Crypt-SSLeay - so far, ok. Now, why does the rest happen? p5-Crypt-SSLeay has BUILD_DEPENDS=3D p5-LWP-Protocol-https>=3D6.02:www/p5-LWP-Protocol-https \ p5-Path-Class>=3D0.26:devel/p5-Path-Class \ p5-Try-Tiny>=3D0.19:lang/p5-Try-Tiny RUN_DEPENDS=3D p5-LWP-Protocol-https>=3D6.02:www/p5-LWP-Protocol-https which I find surprising - p5-Crypt-SSLeay used to be a dependency of LWP::Protocol::https, not "the other way round". I tried to find a reason in the code ("grep -R ^use work") but as far as I could see it only mentions LWP::UserAgent in the documentation, and even mentions that one does not need Crypt::SSLeay anymore(!) to get https suppo= rt in LWP - because it was unbundled to LWP::Protocol::https (as a replacement, not dependency). I tried to remove the DEPENDS setting, and it seems to build and test same = way as with the dependency... Long story short - can you please check whether this BUILD_DEPENDS/RUN_DEPE= NDS to p5-LWP-Protocol-https is needed anymore? thanks --=20 You are receiving this mail because: You are the assignee for the bug.=