pthreads => no Bacula encryption on FreeBSD Release 7

[Matthew Seaman]

Johan van Selst wrote:
> Dan Langille wrote:
>> "This is to warn you that Bacula will probably not be able to be  
>> compiled and run with encryption on Release 7 of FreeBSD.  This is  
>> because the version of pthreads in that release has pthread_t defined as  
>> a structure, which is incompatible with OpenSSL."
> 
> The proper solution here would probably be for bacula to use the newer
> CRYPTO_THREADID features of OpenSSL, which do not have this restriction.
> The API is described at http://www.openssl.org/docs/crypto/threads.html
> Unfortunately these are only available with a recent OpenSSL source -
> and not with the version that is included in the FreeBSD 7 base system.

CRYPTO_THREADID is not in any released version of OpenSSL yet, even the
current release 0.9.8k available now as the security/openssl port. That
functionality is due with OpenSSL 1.0.0 which will be coming out Real
Soon Now. I'm not sure what the plans are for the next FreeBSD 7.x or
8.x releases, but given OpenSSL 1.0.0 is available at the time I'd hope
they could ship with that.

Which simply means that on RELENG_7_{0,1,2} it will be obligatory to use
OpenSSL from ports with Bacula versions after 3.0.0.[*] So you'ld just
need something like this in the bacula-{client,server} Makefiles:

.if ${OSVERSION} >= 700000 && ${OSVERSION} <= 702000
USE_OPENSSL_PORTS=	yes
.endif

This assumes that the bacula project does make use of CRYPTO_THREADID,
and hopefully can be persuaded not to make an incompatible change before
the OpenSSL updates eventually do come out.

	Cheers,

	Matthew

[*] What about supported FreeBSD 6.x versions?

-- 
Dr Matthew J Seaman MA, D.Phil.                       Flat 3
                                                      7 Priory Courtyard
PGP: http://www.infracaninophile.co.uk/pgpkey         Ramsgate
                                                      Kent, CT11 9PW, UK

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
Url : http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20090622/46b01095/signature.pgp