Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-18 Thread Tatsuki Makino
Bernard Spil wrote on 2023/10/19 02:09: > On 2023-10-18 03:22, Tatsuki Makino wrote: >> By the way, security/openssl111 of origin has been disused once, around >> 2020-01-01. >> And if it is used again, how will PORTEPOCH be treated? > > At no point was anything committed to security/openssl111

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-18 Thread Bernard Spil
On 2023-10-18 03:22, Tatsuki Makino wrote: Tatsuki Makino wrote on 2023/10/18 09:06: pkg set -n openssl:openssl111 pkg set -o security/openssl:security/openssl111 Will these changes also update the local.sqlite deps table? :) I have run it in my environment. in use :) From the results of `pkg

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread Tatsuki Makino
Tatsuki Makino wrote on 2023/10/18 09:06: > pkg set -n openssl:openssl111 > pkg set -o security/openssl:security/openssl111 > Will these changes also update the local.sqlite deps table? :) I have run it in my environment. in use :) >From the results of `pkg shell .dump | grep openssl`, it seems

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread Tatsuki Makino
Hello. Xavier Humbert wrote on 2023/10/17 15:41: > DEFAULT_VERSIONS+= ssl=openssl111 We who want to keep 1.1.1 should just do that thing we always do, right? The pkg version results would show the following. openssl-1.1.1w,1 < needs updating (index has 3.0.11,1)

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread Gareth de Vaux
On Mon 2023-10-16 (17:04), DutchDaemon - FreeBSD Forums Administrator wrote: > On 16/10/2023 13:14, DutchDaemon - FreeBSD Forums Administrator wrote: > > On 16/10/2023 13:07, Guido Falsi wrote: > > > On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: > > > > On 16/10/2023 12:57,

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread DutchDaemon - FreeBSD Forums Administrator
On 17/10/2023 12:51, DutchDaemon - FreeBSD Forums Administrator wrote: And, as noted elsewhere, it's linked to the base system OpenSSL, not the ported OpenSSL (make.conf has ssl=openssl). # ldd /usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/_rust.abi3.so

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread DutchDaemon - FreeBSD Forums Administrator
On 17/10/2023 12:43, DutchDaemon - FreeBSD Forums Administrator wrote: I have retried all kinds of rebuilds, new build jails, CCACHE on/off, and full deinstalls/reinstalls, but this remains a problem; I see that there are OpenSSL/py-crypto bugs filed for this, so I will stop trying to remedy

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 12:49, DutchDaemon - FreeBSD Forums Administrator wrote: Certbot is now also broken: # certbot Traceback (most recent call last):   File "/usr/local/bin/certbot", line 33, in     sys.exit(load_entry_point('certbot==2.6.0', 'console_scripts', 'certbot')())   File

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 17:04, DutchDaemon - FreeBSD Forums Administrator wrote: This actually helped. So for old, deep-down remnants of OpenSSL 1.1. to disappear, a wholesale pkg delete -a -f -y and a reinstall of all node packages (get them through pkg prime-origins) is advisable. Note: switching

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread DutchDaemon - FreeBSD Forums Administrator
On 17/10/2023 08:41, Xavier Humbert wrote: Hi Bernard, To be clear, if one wants to keep old openssl11, add DEFAULT_VERSIONS+= ssl=openssl111 to make .conf Am I right ? That is correct. OpenPGP_signature.asc Description: OpenPGP digital signature

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-17 Thread Xavier Humbert
Hi Bernard, To be clear, if one wants to keep old openssl11, add DEFAULT_VERSIONS+= ssl=openssl111 to make .conf Am I right ? Xavier Le 10/15/23 12:41, Bernard Spil a écrit : On 2023-10-06 11:43, Bernard Spil wrote: Hi all, In line with FreeBSD 14.0 that has OpenSSL 3.0 in base, all

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 13:14, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 13:07, Guido Falsi wrote: On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 13:17, Guido Falsi wrote: For this specific jail, 496/496 packages were built from scratch with 0 errors, 0 skips. The only thing I can do is pkg delete -a- f -y && pkg install $(list-of-node-ports) but that seems excessive. A pkg upgrade -fy on all ports should be enough.

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread Guido Falsi
On 16/10/23 13:14, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 13:07, Guido Falsi wrote: On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 13:13, Guido Falsi wrote: I have tried to be helpful and failed. Sorry. Appreciate it and pardon my tone. Let's say I'm glad I tested it on a couple of private servers, not the triple digit amount of servers waiting for it .. OpenPGP_signature.asc Description: OpenPGP

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread Guido Falsi
On 16/10/23 13:13, Guido Falsi wrote: On 16/10/23 13:09, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 13:07, Guido Falsi wrote: On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon -

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 13:07, Guido Falsi wrote: On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread Guido Falsi
On 16/10/23 13:09, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 13:07, Guido Falsi wrote: On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 13:07, Guido Falsi wrote: On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread Guido Falsi
On 16/10/23 13:03, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared object "libssl.so.11" not found, required

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared object "libssl.so.11" not found, required by "transmission-daemon" I guess you will need to force

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 12:57, Guido Falsi wrote: On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared object "libssl.so.11" not found, required by "transmission-daemon" I guess you will need to force

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread Guido Falsi
On 16/10/23 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared object "libssl.so.11" not found, required by "transmission-daemon" I guess you will need to force rebuild/reinstall all packages depending on

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
Certbot is now also broken: # certbot Traceback (most recent call last):   File "/usr/local/bin/certbot", line 33, in     sys.exit(load_entry_point('certbot==2.6.0', 'console_scripts', 'certbot')())   File "/usr/local/bin/certbot", line 25, in importlib_load_entry_point     return

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
Here's another: [72/277] Extracting cyrus-sasl-2.1.28: 100% ld-elf.so.1: Shared object "libcrypto.so.11" not found, required by "libsasl2.so.3" OpenPGP_signature.asc Description: OpenPGP digital signature

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 11:21, DutchDaemon - FreeBSD Forums Administrator wrote: On 16/10/2023 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared object "libssl.so.11" not found, required by "transmission-daemon" and

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
On 16/10/2023 11:19, DutchDaemon - FreeBSD Forums Administrator wrote: I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared object "libssl.so.11" not found, required by "transmission-daemon" and associated: ld-elf.so.1: Shared object "libcrypto.so.11" not found,

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-16 Thread DutchDaemon - FreeBSD Forums Administrator
I found this one after a full rebuild in Poudriere: ld-elf.so.1: Shared object "libssl.so.11" not found, required by "transmission-daemon" OpenPGP_signature.asc Description: OpenPGP digital signature

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-15 Thread Eugene Grosbein
15.10.2023 17:41, Bernard Spil wrote: > security/gost-engine/Makefile:69:BROKEN_SSL+= openssl30 # openssl31 Please avoid touching security/gost-engine. It is special case and I will handle it myself as maintainer.

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-15 Thread Moin Rahman
> On Oct 15, 2023, at 12:41 PM, Bernard Spil wrote: > > On 2023-10-06 11:43, Bernard Spil wrote: >> Hi all, >> In line with FreeBSD 14.0 that has OpenSSL 3.0 in base, all ports are >> expected to work with this version. >> The following changes will be made between first Release Candidate

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-15 Thread Bernard Spil
On 2023-10-06 11:43, Bernard Spil wrote: Hi all, In line with FreeBSD 14.0 that has OpenSSL 3.0 in base, all ports are expected to work with this version. The following changes will be made between first Release Candidate (RC) and actual RELEASE of FreeBSD 14.0: security/openssl

Re: HEADS-UP: security/openssl switching to 3.0 branch

2023-10-06 Thread Moin Rahman
> On Oct 6, 2023, at 1:43 PM, Bernard Spil wrote: > > Hi all, > > In line with FreeBSD 14.0 that has OpenSSL 3.0 in base, all ports are > expected to work with this version. > > The following changes will be made between first Release Candidate (RC) and > actual RELEASE of FreeBSD 14.0: >