svn commit: r414564 - in head: . Mk

[Bernard Spil]

Author: brnrd
Date: Tue May  3 22:09:21 2016
New Revision: 414564
URL: https://svnweb.freebsd.org/changeset/ports/414564

Log:
  security/libressl: Add UPDATING entry and bump SHLIB in bsd.openssl.mk
  
    - Add UPDATING entry, users must recompile all ports that depend
    - Bump SHLIBVER in Mk/bsd.openssl.mk
  
  PR:		209252

Modified:
  head/Mk/bsd.openssl.mk
  head/UPDATING

Modified: head/Mk/bsd.openssl.mk
==============================================================================
--- head/Mk/bsd.openssl.mk	Tue May  3 21:55:09 2016	(r414563)
+++ head/Mk/bsd.openssl.mk	Tue May  3 22:09:21 2016	(r414564)
@@ -102,11 +102,13 @@ OPENSSL_SHLIBVER?=	${OPENSSL_SHLIBFILE:E
 .endif
 .endif
 
-# LibreSSL specific SHLIBVER
+# LibreSSL and OpenSSL-BETA specific SHLIBVER
 .if   defined(OPENSSL_PORT) && ${OPENSSL_PORT} == security/libressl
-OPENSSL_SHLIBVER?=	35
+OPENSSL_SHLIBVER?=	37
 .elif defined(OPENSSL_PORT) && ${OPENSSL_PORT} == security/libressl-devel
 OPENSSL_SHLIBVER?=	37
+.elif defined(OPENSSL_PORT) && ${OPENSSL_PORT} == security/openssl-devel
+OPENSSL_SHLIBVER?=	9
 .endif
 
 # default

Modified: head/UPDATING
==============================================================================
--- head/UPDATING	Tue May  3 21:55:09 2016	(r414563)
+++ head/UPDATING	Tue May  3 22:09:21 2016	(r414564)
@@ -5,6 +5,32 @@ they are unavoidable.
 You should get into the habit of checking this file for changes each time
 you update your ports collection, before attempting any port upgrades.
 
+20160503:
+  AFFECTS: users of security/libressl
+  AUTHOR: brnrd at FreeBSD.org
+
+  LibreSSL 2.3 has removed SSLv3 support completely which leads to issues
+  with a number of ports. Patches for many of these issues can be found
+  on https://wiki.freebsd.org/OpenSSL/No-SSLv3
+
+  After upgrading to 2.3.4, manually update all packages that depend on
+  any of the libraries provided by LibreSSL (libssl, libcrypto and
+  libtls) since the versions of these libraries have changed. Normally,
+  you can obtain the list of dependent software by running the following
+  command:
+
+  # pkg info -r libressl
+
+  Then you should rebuild all ports depending on libressl to avoid dangling
+  shared library dependencies. Poudriere and pkg handle this correctly,
+  portmaster and portupgrade users can use the following to rebuild all
+  dependent ports.
+
+  Portmaster users:
+      portmaster -r libressl
+  Portupgrade users:
+      portupgrade -fr security/libressl
+
 20160501:
   AFFECTS: Users of mail/dspam
   AUTHOR: junovitch at FreeBSD.org