From nobody Mon May 08 20:11:12 2023 X-Original-To: freebsd-arch@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4QFXVk3X0cz4BKCC for ; Mon, 8 May 2023 20:11:26 +0000 (UTC) (envelope-from carpeddiem@gmail.com) Received: from mail-lj1-f175.google.com (mail-lj1-f175.google.com [209.85.208.175]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4QFXVj3qxcz4Cpk for ; Mon, 8 May 2023 20:11:25 +0000 (UTC) (envelope-from carpeddiem@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=none; spf=pass (mx1.freebsd.org: domain of carpeddiem@gmail.com designates 209.85.208.175 as permitted sender) smtp.mailfrom=carpeddiem@gmail.com; dmarc=none Received: by mail-lj1-f175.google.com with SMTP id 38308e7fff4ca-2ad89c7a84fso23186991fa.2 for ; Mon, 08 May 2023 13:11:25 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1683576683; x=1686168683; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=jNzHEeJacU+uV1M5yv78eb45CSb750JBu+ZGpwAdwtk=; b=lr7vXkc7Bbk2LJwpFRKhB+iw7AchnxBhlBa+nhudpMdhl163GYSzyIYrDFTlTq5S7t MsGA0N1AS/IXeSb6XCTwhTW5jMPG+sD4PKZeFNgqrWnT4QMK1O54fTCAl0+3QbhvGJXy WZHTzliFTnWUZLmNsd3lZjLyxZoezJcOT+K585yvmWAUTG7sSwE3ztbNB2GbMs5vGti6 oo4zmfeyQkgPe5jHVFou/wyIcWrfxnbz7AuS51clkm6G7n4zgGc92C1OqPi18ADEm6D6 fN6vYO5XxrqG5HGeJC2YMwqfYX7f7THIE5GCfBl5q/fFxdIuqhqWswtzohId9OMVQUia nSdw== X-Gm-Message-State: AC+VfDxE3MGO2i3znV6nFNapDm40/BQPGrwddPqxXIvo+dvtoammkXqy eTvgO5ady9GADT79UL/NCUiLmAr28pOWeGFzPIuVXaNd2bk= X-Google-Smtp-Source: ACHHUZ6VRvQS6x13ya6BGmrvFU4O+4Hfz+RqfqW2MdobRa1zAcQRwChEWm/9wQzWnpKfjlHmaY6I4EhYDZwMm3YwpJU= X-Received: by 2002:a2e:8803:0:b0:2ab:1b57:6e3d with SMTP id x3-20020a2e8803000000b002ab1b576e3dmr73774ljh.51.1683576683175; Mon, 08 May 2023 13:11:23 -0700 (PDT) List-Id: Discussion related to FreeBSD architecture List-Archive: https://lists.freebsd.org/archives/freebsd-arch List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-arch@freebsd.org MIME-Version: 1.0 References: <12f8559c-d696-5344-98d5-1751d04088af@FreeBSD.org> In-Reply-To: From: Ed Maste Date: Mon, 8 May 2023 16:11:12 -0400 Message-ID: Subject: Re: OpenSSL 3.0 for 14.0-RELEASE: issues with 1.x/3.x symbol clashing, ports linking against base OpenSSL, ports that don't compile/link against OpenSSL 3, etc To: Pierre Pronchery Cc: freebsd-arch@freebsd.org Content-Type: text/plain; charset="UTF-8" X-Spamd-Result: default: False [-1.45 / 15.00]; NEURAL_HAM_SHORT(-1.00)[-0.999]; NEURAL_HAM_LONG(-1.00)[-0.998]; NEURAL_SPAM_MEDIUM(0.55)[0.549]; FORGED_SENDER(0.30)[emaste@freebsd.org,carpeddiem@gmail.com]; R_SPF_ALLOW(-0.20)[+ip4:209.85.128.0/17:c]; MIME_GOOD(-0.10)[text/plain]; MLMMJ_DEST(0.00)[freebsd-arch@freebsd.org]; RWL_MAILSPIKE_POSSIBLE(0.00)[209.85.208.175:from]; ARC_NA(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; R_DKIM_NA(0.00)[]; FROM_NEQ_ENVFROM(0.00)[emaste@freebsd.org,carpeddiem@gmail.com]; ASN(0.00)[asn:15169, ipnet:209.85.128.0/17, country:US]; RCVD_IN_DNSWL_NONE(0.00)[209.85.208.175:from]; TO_MATCH_ENVRCPT_SOME(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]; FREEFALL_USER(0.00)[carpeddiem]; RCPT_COUNT_TWO(0.00)[2]; TO_DN_SOME(0.00)[]; DMARC_NA(0.00)[freebsd.org]; PREVIOUSLY_DELIVERED(0.00)[freebsd-arch@freebsd.org]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_TWO(0.00)[2] X-Rspamd-Queue-Id: 4QFXVj3qxcz4Cpk X-Spamd-Bar: - X-ThisMailContainsUnwantedMimeParts: N On Fri, 5 May 2023 at 16:03, Ed Maste wrote: > > I had a look at the remaining build failures with your changes merged > in, and I see errors due to deprecation notices in: For the simple cases where deprecation notices are the only issue we can just set OPENSSL_API_COMPAT=0x10100000L to specify the API in use explicitly. We can do this in advance of bringing in OpenSSL 3; it will just be a NFC at present. I've done this for bhyve just now, with commit 9c6f3dfda6dd. We can do the same for the other components using OpenSSL, and can switch each of these to using OpenSSL 3 APIs at some point after we import OpenSSL 3.