[Bug 228054] www/rubygem-passenger is missing passenger_native_support.so

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=228054

            Bug ID: 228054
           Summary: www/rubygem-passenger is missing
                    passenger_native_support.so
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: osa at FreeBSD.org
          Reporter: feld at FreeBSD.org
          Assignee: osa at FreeBSD.org
             Flags: maintainer-feedback?(osa at FreeBSD.org)

Hello,

Seems the www/rubygem-passenger package is missing the inclusion of
passenger_native_support.so. As a result it will try to download it from the
internet(!) which is a grave security concern:

App 94175 stderr:  [passenger_native_support.so] finding downloads for the
current Ruby interpreter...
App 94175 stderr: 
App 94175 stderr:      (set PASSENGER_DOWNLOAD_NATIVE_SUPPORT_BINARY=0 to
disable)
App 94175 stderr: 
App 94175 stderr:      Could not download
https://oss-binaries.phusionpassenger.com/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.4.4-x86_64-freebsd.tar.gz:
no download tool found (curl or wget required)
App 94175 stderr:      Trying next mirror...
App 94175 stderr:      Could not download
https://s3.amazonaws.com/phusion-passenger/binaries/passenger/by_release/5.2.1/rubyext-ruby-2.4.4-x86_64-freebsd.tar.gz:
no download tool found (curl or wget required)
App 94175 stderr:  [passenger_native_support.so] will not be used (can't
compile or download) 
App 94175 stderr: 
App 94175 stderr:   --> Passenger will still operate normally.

If someone happens to have wget or curl on their system they may not be seeing
this issue as the download could be working, but it is unclear how the download
is validated and if it is strict about requiring a trusted certificate
authority.

-- 
You are receiving this mail because:
You are the assignee for the bug.