Re: HEADS-UP: security/openssl switching to 3.0 branch

From: Moin Rahman <bofh_at_freebsd.org>
Date: Sun, 15 Oct 2023 10:56:48 UTC

> On Oct 15, 2023, at 12:41 PM, Bernard Spil <brnrd@freebsd.org> wrote:
> 
> On 2023-10-06 11:43, Bernard Spil wrote:
>> Hi all,
>> In line with FreeBSD 14.0 that has OpenSSL 3.0 in base, all ports are expected to work with this version.
>> The following changes will be made between first Release Candidate (RC) and actual RELEASE of FreeBSD 14.0:
>> security/openssl    updated from 1.1.1w to 3.0.11
>> security/openssl30  removed
>> security/openssl111 created with version (1.1.1w)
>> UPDATING            an entry about updating all ports for the SHLIBVER bump will be added
>> MOVED               an entry for security/openssl30 with target security/openssl will be created
>> The security/openssl111 port will be marked "DEPRECATED" in line with statements from the OpenSSL project about the End-of-Life for the 1.1.1 branch. No "EXPIRATION_DATE" will be set for now.
>> With kind regards, Bernard Spil <brnrd@FreeBSD.org>
> 
> Hi all,
> 
> DEFAULT_VERSIONS+= openssl is now OpenSSL 3.0.11 (openssl-3.0.11,1)
> 
> Quick search in ports tree uncovers the following ports that seem to require 1.1.1. I'm chasing them down and adapting the BROKEN_SSL versions, but not making them require openssl111 at the moment. Expect a commit soon.
> 
> audio/umurmur/Makefile:31:BROKEN_SSL=   openssl30 openssl31
> audio/murmur/Makefile:17:BROKEN_SSL=    openssl30 openssl31
> audio/spotify-tui/Makefile:294:BROKEN_SSL=      base openssl30 openssl31
> net/gq/Makefile:48:BROKEN_SSL=  base openssl openssl30 openssl31
> mail/enma/Makefile:19:BROKEN_SSL=       openssl30 openssl31
> sysutils/vector/Makefile:568:BROKEN_SSL=        base openssl30 openssl31
> sysutils/flowgger/Makefile:18:#BROKEN_SSL=      openssl30 openssl31
> www/castor/Makefile:133:BROKEN_SSL=     base openssl30 openssl31
> www/rearx/Makefile:177:BROKEN_SSL=      base openssl30 openssl31
> net-im/telegram-desktop/Makefile:16:BROKEN_SSL= openssl30 openssl31
> archivers/xar/Makefile:18:BROKEN_SSL=   openssl30 openssl31
> devel/kore/Makefile:13:BROKEN_SSL=      openssl30 openssl31
> devel/gbump/Makefile:20:BROKEN_SSL=     openssl30 openssl31
> devel/gbump/Makefile:69:BROKEN_SSL=     base openssl30 openssl31
> devel/ptlib/Makefile:17:BROKEN_SSL=     openssl30 openssl31
> security/pkcs11-tools/Makefile:16:BROKEN_SSL=   libressl openssl30 openssl31
> security/pkcs11-tools/Makefile:18:BROKEN_SSL_REASON_openssl30=  error: undefined symbol: EVP_PKEY_*
> security/p5-Filter-Crypto/Makefile:19:BROKEN_SSL=       openssl30 openssl31
> security/krb5-119/Makefile:28:BROKEN_SSL=       openssl30 openssl31
> security/proxytunnel/Makefile:18:BROKEN_SSL=    openssl30 openssl31
> security/py-nassl/Makefile:14:BROKEN_SSL=       openssl30 openssl31
> security/gost-engine/Makefile:69:BROKEN_SSL+=   openssl30 # openssl31
> 


net/lavinmq/Makefile
www/screego/Makefile
www/dot-http/Makefile
databases/movine/Makefile
databases/xrootd/Makefile
dns/dog/Makefile
net-p2p/cardano-node/Makefile

Can you please have a look at these too?

Kind regards,
Moin