From nobody Wed Oct 25 09:57:28 2023 X-Original-To: ports@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4SFkqt68FQz4yHb2 for ; Wed, 25 Oct 2023 09:57:30 +0000 (UTC) (envelope-from DutchDaemon@FreeBSD.org) Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4SFkqt5lsfz3QqW for ; Wed, 25 Oct 2023 09:57:30 +0000 (UTC) (envelope-from DutchDaemon@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1698227850; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=Lv81ykHddtO+DyVUNgg35A//EFlgsKWPzYE9Qdl/1hM=; b=ZsM8MKMkVhTQ4v/4z25jUcqg3ZDLTuq36amIozULmAb6EEYNQlOJGNcTKvopvfk2pR8PHU DepsKRNrHuUwn/KRWRj/OXdQfIGwkl0Ex296yIZfOptu9zwr9WHp5J409+LN9ejnft6eo+ fU6JSrLPkwRRJtZS+47hZMgdXn2CFvH8RvMk8g0eIGbNySUIR3d201q+UfG/LSCpdWNNI1 eWaDyqkvs5DBzjzEaQ/yyl7DEIDDUiYwQLaAnC+ns8CCkCvM3Ilsr/2+bzOdr0eRUR6s9Q xN3376ZNq2eq7vJw8giK2Hv7Yh+h9waJ3IlIV8fyi4mUNlQOdHpgTgu6C2MRPw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1698227850; a=rsa-sha256; cv=none; b=by7MtwyST1x4sCMCXkJmighaXXToIRfuY4Bvs6DILBHRBViSxXx6P6U3+6JcgyT6sMwG4y VKgLlyVG9AVFFaxOZQZ1Zn/FKSGOo/De/Crqfa2cUEk3lhz/378uN3lJZ1d/0i0Iahoj6U MKEzB/vobjiUJ+duC4eKrd/bfIaIHk/zWSng7annz2E+MpxKmVOPHLMTgm1/jeTWcb+B3f JOkWakOx3CCOPA6LvP+/lU7WLQa6xT41knM34sBXwovaQO3B8jSmAdtxxakwb9DlA4sBRT 9qkJ83qPiWWXXUAnK8/cDSuGtf1GO7//d7xnRJVTrRnfDFA5EyiSBZq67zsVig== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1698227850; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=Lv81ykHddtO+DyVUNgg35A//EFlgsKWPzYE9Qdl/1hM=; b=KDTXmO+ECE2i2/LFBGgMt0GmRc2CDIFVoWLyMLU89VZ9XKBcSyGCx8LAsgxf2f8VTn8rXS jBX3WGqI4N61UKlaUlsbwQgo6dfKszd6GUV1ik6/WXbAlpumwCbBIJnD5pN3lBGMbQyC8S Yn4lQrYhtq+blstgLgVcnm64/QBUq9eUpucrXlOvUFw1xyIhQGTWn8ugpI42T6N0DIs/PC Gc5rCc+A336t38EqJ19QofYKdWor6XM81qHQdhUD8Qdp2HtxQ9dTyAcN3jALLIZohdrN6U TcR4FFR8VojieVP8mMhEsu/DjUVmYNY1rMlhV5NM3q2PG8/U0A+zseYHIwObMw== Received: from [192.168.178.205] (unknown [85.148.89.7]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) (Authenticated sender: dutchdaemon/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id 4SFkqt2xf9znxb for ; Wed, 25 Oct 2023 09:57:30 +0000 (UTC) (envelope-from DutchDaemon@FreeBSD.org) Message-ID: Date: Wed, 25 Oct 2023 11:57:28 +0200 List-Id: Porting software to FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-ports List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-ports@freebsd.org X-BeenThere: freebsd-ports@freebsd.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: FreeBSD 13 + CertBot + OpenSSL 3 - status? Content-Language: nl, en-US To: ports@freebsd.org References: <76713a44-1fa4-41ee-a4f9-177907e9a57f@FreeBSD.org> <18b65b654d0.2818.b36d34a15fda208b80f54b6ad54d9e04@freebsd.org> <186133619.3538.1698225155900@localhost> From: DutchDaemon - FreeBSD Forums Administrator Organization: The FreeBSD Forums In-Reply-To: <186133619.3538.1698225155900@localhost> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------jw0D29VZbuZRy6krDntw80gZ" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------jw0D29VZbuZRy6krDntw80gZ Content-Type: multipart/mixed; boundary="------------CSmHWJPMaYOK8e5aHyYDtuSY"; protected-headers="v1" From: DutchDaemon - FreeBSD Forums Administrator To: ports@freebsd.org Message-ID: Subject: Re: FreeBSD 13 + CertBot + OpenSSL 3 - status? References: <76713a44-1fa4-41ee-a4f9-177907e9a57f@FreeBSD.org> <18b65b654d0.2818.b36d34a15fda208b80f54b6ad54d9e04@freebsd.org> <186133619.3538.1698225155900@localhost> In-Reply-To: <186133619.3538.1698225155900@localhost> --------------CSmHWJPMaYOK8e5aHyYDtuSY Content-Type: multipart/alternative; boundary="------------YRlRXZkGgsgquuHvDq21ZINS" --------------YRlRXZkGgsgquuHvDq21ZINS Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 T24gMjUvMTAvMjAyMyAxMToxMiwgUm9uYWxkIEtsb3Agd3JvdGU6DQo+IEhpLA0KPg0KPiBJ IHNlZSB0aGF0IHlvdSBhcmUgY29tcGlsaW5nIGNlcnRib3QgdG8gb3BlbnNzbCBmcm9tIHBv cnRzLiBBcHBhcmVudGx5IA0KPiB5b3UgYXJlIHJ1bm5pbmcgYSBub3Qgb2Z0ZW4gdXNlZCBj b25maWd1cmF0aW9uIG9mIHRoZSBwb3J0Lg0KDQpJJ20gbm90IHNvIHN1cmUgYWJvdXQgdGhh dC4gT3BlblNTTCBpbiBwb3J0cyBpcyB1c3VhbGx5IHF1aXRlIGEgbG90IA0KYWhlYWQgb2Yg YmFzZSBzeXN0ZW0gT3BlblNTTCwgd2hpY2ggaXMgd2h5IEkgYnVpbGQgZXZlcnl0aGluZyBh Z2FpbnN0IA0KaXQuIEknbSBzdXJlIEknbSBub3QgdGhlIG9ubHkgb25lLg0KDQo+IERpZCB5 b3UgdHJ5IHJlYWNoaW5nIG91dCB0byB0aGUgbWFpbnRhaW5lciBvZiB0aGUgcG9ydCANCj4g KHB5dGhvbkBGcmVlQlNELm9yZyk/DQoNClRoaXMgYnVnIGlzIHByZXR0eSB3ZWxsLWtub3du LCBhbmQgc2luY2UgaXQgb3JpZ2luYXRlcyBpbiBwa2djb25mIChub3QgDQpQeXRob24pIGFu ZCB0aGVyZSBpcyBhIGxlbmd0aHkgUFIgYWJvdXQgaXQgKHdpdGggYSB0ZW50YXRpdmUgcGF0 Y2gsIA0Kd2hpY2ggSSB3YXMgdG9sZCBhYm91dCBqdXN0IG5vdyksIEkgZGVjaWRlZCB0byBq dXN0IHBvc3QgaGVyZSB0byBnZXQgDQpzb21lIGV5ZWJhbGxzLCBTdWNjZXNzZnVsbHkgOykN Cg0KPiBBbmQgdGhlcmUgYXJlIGFsc28gb3RoZXIgaW1wbGVtZW50YXRpb25zIG9mIHRoZSBB Q01FIHByb3RvY29sIGluIHRoZSANCj4gcG9ydHMgdHJlZSBsaWtlIHNlY3VyaXR5L2FjbWV0 b29sLiBJIGhhdmUgbm8gZXhwZXJpZW5jZSB3aXRoIHRoZW0gYnV0IA0KPiB0aGV5IG1pZ2h0 IGZpdCB5b3VyIHVzZSBjYXNlLg0KDQpkZWh5ZHJhdGUgYW5kIGFjbWV0b29scyBhcmUgY3Vy cmVudGx5IG9uIHRoZSByYWRhciB0byBhdm9pZCB0aGUgbmV4dCANCih1bmF2b2lkYWJsZSkg aXNzdWUgd2l0aCBjZXJ0Ym90Lg0KDQo+DQo+IFNvcnJ5IEkgY2FuJ3QgaGVscCB5b3UgZnVy dGhlciBmb3Igbm93LiBNYXliZSBvdGhlcnMgaGF2ZSBtb3JlIGhhbmRzb24gDQo+IGV4cGVy aWVuY2Ugd2l0aCBydW5uaW5nIHB5dGhvbiB3aXRoIG9wZW5zc2wxMTEgZnJvbSBwb3J0cy4N Cj4NCj4gUFM6IGFzIHlvdSBoYXZlIHRoZSBuYW1lICJEdXRjaCIgaW4geW91ciBlbWFpbCBw bGVhc2UgY2hlY2sgb3V0IHRoZSANCj4gdXBjb21pbmcgRHV0Y2ggQlNEIGV2ZW50IGluIE5v dmVtYmVyOiBodHRwczovL2JzZG5sLm5sLw0KDQpJIGNhbid0LCBidXQgSSdsbCBhbGVydCB0 aGUgRnJlZUJTRCBGb3J1bXMgYWJvdXQgaXQ7IHBsZW50eSBvZiBEdXRjaGllcyANCm9uIHRo ZXJlIGFzIHdlbGwuDQoNCg0KPiAqVmFuOiogRHV0Y2ggRGFlbW9uIC0gRnJlZUJTRCBGb3J1 bXMgQWRtaW5pc3RyYXRvciANCj4gPGR1dGNoZGFlbW9uQGZyZWVic2Qub3JnPg0KPiAqRGF0 dW06KiB3b2Vuc2RhZywgMjUgb2t0b2JlciAyMDIzIDA5OjIyDQo+ICpBYW46KiBmcmVlYnNk LXBvcnRzQGZyZWVic2Qub3JnDQo+ICpPbmRlcndlcnA6KiBSZTogRnJlZUJTRCAxMyArIENl cnRCb3QgKyBPcGVuU1NMIDMgLSBzdGF0dXM/DQo+DQo+ICAgICAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCj4NCj4gICAgIE9uIE9jdG9iZXIgMjQsIDIwMjMgMTQ6NTQ6NDAgRHV0Y2hEYWVtb24g LSBGcmVlQlNEIEZvcnVtcw0KPiAgICAgQWRtaW5pc3RyYXRvciA8RHV0Y2hEYWVtb25ARnJl ZUJTRC5vcmc+IHdyb3RlOg0KPg0KPiAgICAgICAgIERvZXMgYW55b25lIGluICdwb3J0IGxh bmQnIGtub3cgd2hhdCB0aGUgY3VycmVudCBkZXZlbG9wbWVudHMNCj4gICAgICAgICBhcmUg d3J0IENlcnRCb3QgKG9yIHB5LWNyeXB0byB1bmRlciBpdHMgaG9vZCk/DQo+DQo+ICAgICAg ICAgQ2VydEJvdCBpcyBoYXBwaWx5IGNvbXBpbGluZyBhZ2FpbnN0IE9wZW5TU0wgMyBmcm9t IHBvcnRzLCBidXQNCj4gICAgICAgICB3aGVuIHJ1bm5pbmcgJ2NlcnRib3QnLCB0aGUgY3J5 cHRvIHNpZGUgb2YgaXQgdGFsa3MgdG8gdGhlDQo+ICAgICAgICAgYmFzZSBzeXN0ZW0gT3Bl blNTTCAxLjEuMSwgaGVuY2UgZmFpbGluZyBiZWNhdXNlIHRoZSBPcGVuU1NMDQo+ICAgICAg ICAgMS4xLjEgbGlicmFyeSBkb2VzIG5vdCB1bmRlcnN0YW5kIHRoZSBPcGVuU1NMIDMgY2Fs bHMgbWFkZSB0byBpdC4NCj4NCj4gICAgICAgICBGcm9tIHdoYXQgSSB1bmRlcnN0b29kLCB0 aGlzIHdhcyBkdWUgdG8gYW4gZXJyb3IvcmVncmVzc2lvbiBpbg0KPiAgICAgICAgIHBrZ2Nv bmYoPykgd2hpY2ggY2F1c2VzIHNvbWUgdHlwZSBvZiAncGF0aCByZXZlcnNhbCcgdGhhdA0K PiAgICAgICAgIGNhdXNlcyBweS1jcnlwdG8gdG8gaWdub3JlIHRoZSBPcGVuU1NMIGl0IHdh cyBjb21waWxlZA0KPiAgICAgICAgIGFnYWluc3QsIGZhdm9yaW5nIHRoZSBiYXNlIHN5c3Rl bSBsaWJyYXJ5Lg0KPg0KPiAgICAgICAgIEkgZWl0aGVyIGhhdmUgdG8gcmV2ZXJ0IGEgd2hv bGUgbG90IG9mIHNlcnZlcnMgYmFjayB0byBPcGVuU1NMDQo+ICAgICAgICAgMS4xLjF3IGZy b20gcG9ydHMgaW4gb3JkZXIgdG8gcmVuZXcgY2VydGlmaWNhdGVzLCBvciB3YWl0IGZvcg0K PiAgICAgICAgICJhbnkgbW92ZW1lbnQiIGluIGdldHRpbmcgdGhlIHBhdGggcmV2ZXJzYWwg YWRkcmVzc2VkL2ZpeGVkLg0KPg0KPiAgICAgICAgIFNvOiBkb2VzIGFueW9uZSBrbm93IHdo ZXJlIHdlJ3JlIGF0IHdpdGggdGhpcz8NCj4NCj4gICAgIE1lbW9yeSBqb2c6DQo+ICAgICBU cmFjZWJhY2sgKG1vc3QgcmVjZW50IGNhbGwgbGFzdCk6DQo+ICAgICDCoEZpbGUgIi91c3Iv bG9jYWwvYmluL2NlcnRib3QiLCBsaW5lIDMzLCBpbiA8bW9kdWxlPg0KPiAgICAgwqBzeXMu ZXhpdChsb2FkX2VudHJ5X3BvaW50KCdjZXJ0Ym90PT0yLjYuMCcsICdjb25zb2xlX3Njcmlw dHMnLA0KPiAgICAgJ2NlcnRib3QnKSgpKQ0KPiAgICAgwqBGaWxlICIvdXNyL2xvY2FsL2Jp bi9jZXJ0Ym90IiwgbGluZSAyNSwgaW4gaW1wb3J0bGliX2xvYWRfZW50cnlfcG9pbnQNCj4g ICAgIMKgcmV0dXJuIG5leHQobWF0Y2hlcykubG9hZCgpDQo+ICAgICDCoEZpbGUgIi91c3Iv bG9jYWwvbGliL3B5dGhvbjMuOS9pbXBvcnRsaWIvbWV0YWRhdGEucHkiLCBsaW5lIDg2LA0K PiAgICAgaW4gbG9hZA0KPiAgICAgwqBtb2R1bGUgPSBpbXBvcnRfbW9kdWxlKG1hdGNoLmdy b3VwKCdtb2R1bGUnKSkNCj4gICAgIMKgRmlsZSAiL3Vzci9sb2NhbC9saWIvcHl0aG9uMy45 L2ltcG9ydGxpYi9fX2luaXRfXy5weSIsIGxpbmUgMTI3LA0KPiAgICAgaW4gaW1wb3J0X21v ZHVsZQ0KPiAgICAgwqByZXR1cm4gX2Jvb3RzdHJhcC5fZ2NkX2ltcG9ydChuYW1lW2xldmVs Ol0sIHBhY2thZ2UsIGxldmVsKQ0KPiAgICAgwqBGaWxlICI8ZnJvemVuIGltcG9ydGxpYi5f Ym9vdHN0cmFwPiIsIGxpbmUgMTAzMCwgaW4gX2djZF9pbXBvcnQNCj4gICAgIMKgRmlsZSAi PGZyb3plbiBpbXBvcnRsaWIuX2Jvb3RzdHJhcD4iLCBsaW5lIDEwMDcsIGluIF9maW5kX2Fu ZF9sb2FkDQo+ICAgICDCoEZpbGUgIjxmcm96ZW4gaW1wb3J0bGliLl9ib290c3RyYXA+Iiwg bGluZSA5ODYsIGluDQo+ICAgICBfZmluZF9hbmRfbG9hZF91bmxvY2tlZA0KPiAgICAgwqBG aWxlICI8ZnJvemVuIGltcG9ydGxpYi5fYm9vdHN0cmFwPiIsIGxpbmUgNjgwLCBpbiBfbG9h ZF91bmxvY2tlZA0KPiAgICAgwqBGaWxlICI8ZnJvemVuIGltcG9ydGxpYi5fYm9vdHN0cmFw X2V4dGVybmFsPiIsIGxpbmUgODUwLCBpbg0KPiAgICAgZXhlY19tb2R1bGUNCj4gICAgIMKg RmlsZSAiPGZyb3plbiBpbXBvcnRsaWIuX2Jvb3RzdHJhcD4iLCBsaW5lIDIyOCwgaW4NCj4g ICAgIF9jYWxsX3dpdGhfZnJhbWVzX3JlbW92ZWQNCj4gICAgIMKgRmlsZSAiL3Vzci9sb2Nh bC9saWIvcHl0aG9uMy45L3NpdGUtcGFja2FnZXMvY2VydGJvdC9tYWluLnB5IiwNCj4gICAg IGxpbmUgNiwgaW4gPG1vZHVsZT4NCj4gICAgIMKgZnJvbSBjZXJ0Ym90Ll9pbnRlcm5hbCBp bXBvcnQgbWFpbiBhcyBpbnRlcm5hbF9tYWluDQo+ICAgICDCoEZpbGUNCj4gICAgICIvdXNy L2xvY2FsL2xpYi9weXRob24zLjkvc2l0ZS1wYWNrYWdlcy9jZXJ0Ym90L19pbnRlcm5hbC9t YWluLnB5IiwNCj4gICAgIGxpbmUgMjEsIGluIDxtb2R1bGU+DQo+ICAgICDCoGltcG9ydCBq b3NlcHkgYXMgam9zZQ0KPiAgICAgwqBGaWxlICIvdXNyL2xvY2FsL2xpYi9weXRob24zLjkv c2l0ZS1wYWNrYWdlcy9qb3NlcHkvX19pbml0X18ucHkiLA0KPiAgICAgbGluZSA0MCwgaW4g PG1vZHVsZT4NCj4gICAgIMKgZnJvbSBqb3NlcHkuanNvbl91dGlsIGltcG9ydCAoDQo+ICAg ICDCoEZpbGUNCj4gICAgICIvdXNyL2xvY2FsL2xpYi9weXRob24zLjkvc2l0ZS1wYWNrYWdl cy9qb3NlcHkvanNvbl91dGlsLnB5IiwgbGluZQ0KPiAgICAgMTQsIGluIDxtb2R1bGU+DQo+ ICAgICDCoGZyb20gT3BlblNTTCBpbXBvcnQgY3J5cHRvDQo+ICAgICDCoEZpbGUNCj4gICAg ICIvdXNyL2xvY2FsL2xpYi9weXRob24zLjkvc2l0ZS1wYWNrYWdlcy9PcGVuU1NML19faW5p dF9fLnB5IiwgbGluZQ0KPiAgICAgOCwgaW4gPG1vZHVsZT4NCj4gICAgIMKgZnJvbSBPcGVu U1NMIGltcG9ydCBTU0wsIGNyeXB0bw0KPiAgICAgwqBGaWxlICIvdXNyL2xvY2FsL2xpYi9w eXRob24zLjkvc2l0ZS1wYWNrYWdlcy9PcGVuU1NML1NTTC5weSIsDQo+ICAgICBsaW5lIDks IGluIDxtb2R1bGU+DQo+ICAgICDCoGZyb20gT3BlblNTTC5fdXRpbCBpbXBvcnQgKA0KPiAg ICAgwqBGaWxlICIvdXNyL2xvY2FsL2xpYi9weXRob24zLjkvc2l0ZS1wYWNrYWdlcy9PcGVu U1NML191dGlsLnB5IiwNCj4gICAgIGxpbmUgNiwgaW4gPG1vZHVsZT4NCj4gICAgIMKgZnJv bSBjcnlwdG9ncmFwaHkuaGF6bWF0LmJpbmRpbmdzLm9wZW5zc2wuYmluZGluZyBpbXBvcnQg QmluZGluZw0KPiAgICAgwqBGaWxlDQo+ICAgICAiL3Vzci9sb2NhbC9saWIvcHl0aG9uMy45 L3NpdGUtcGFja2FnZXMvY3J5cHRvZ3JhcGh5L2hhem1hdC9iaW5kaW5ncy9vcGVuc3NsL2Jp bmRpbmcucHkiLA0KPiAgICAgbGluZSAxNSwgaW4gPG1vZHVsZT4NCj4gICAgIMKgZnJvbSBj cnlwdG9ncmFwaHkuZXhjZXB0aW9ucyBpbXBvcnQgSW50ZXJuYWxFcnJvcg0KPiAgICAgwqBG aWxlDQo+ICAgICAiL3Vzci9sb2NhbC9saWIvcHl0aG9uMy45L3NpdGUtcGFja2FnZXMvY3J5 cHRvZ3JhcGh5L2V4Y2VwdGlvbnMucHkiLA0KPiAgICAgbGluZSA5LCBpbiA8bW9kdWxlPg0K PiAgICAgwqBmcm9tIGNyeXB0b2dyYXBoeS5oYXptYXQuYmluZGluZ3MuX3J1c3QgaW1wb3J0 IGV4Y2VwdGlvbnMgYXMNCj4gICAgIHJ1c3RfZXhjZXB0aW9ucw0KPiAgICAgSW1wb3J0RXJy b3I6DQo+ICAgICAvKnVzci9sb2NhbC9saWIvcHl0aG9uMy45L3NpdGUtcGFja2FnZXMvY3J5 cHRvZ3JhcGh5L2hhem1hdC9iaW5kaW5ncy9fcnVzdC5hYmkzLnNvKjoNCj4gICAgIFVuZGVm aW5lZCBzeW1ib2wgIkVWUF9kZWZhdWx0X3Byb3BlcnRpZXNfaXNfZmlwc19lbmFibGVkIg0K Pg0KPg0K --------------YRlRXZkGgsgquuHvDq21ZINS Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
On 25/10/2023 11:12, Ronald Klop wrote= :
Hi,

I see that you are compiling certbot to openssl from ports. Apparently you are running a not often used configuration of the port.

I'm not so sure about that. OpenSSL in ports is usually quite a lot ahead of base system OpenSSL, which is why I build everything against it. I'm sure I'm not the only one.

Did you try reaching out to the maintainer of the port (python@FreeBSD.org)?

This bug is pretty well-known, and since it originates in pkgconf (not Python) and there is a lengthy PR about it (with a tentative patch, which I was told about just now), I decided to just post here to get some eyeballs, Successfully ;)

And there are also other implementations of the ACME protocol in the ports tree like security/acmetool. I have no experience with them but they might fit your use case.

dehydrate and acmetools are currently on the radar to avoid the next (unavoidable) issue with certbot.


Sorry I can't help you further for now. Maybe others have more handson experience with running python with openssl111 from ports.<= br>
PS: as you have the name "Dutch" in your email please check out the upcoming Dutch BSD event in November: https://bsdnl.nl/

I can't, but I'll alert the FreeBSD Forums about it; plenty of Dutchies on there as well.


=C2=A0

Van: Dutch Daemon - FreeBSD Forums Administrator <dutchdaemon@freebsd.org>
Datum: woensdag, 25 oktober 2023 09:22
Aan: freebsd-ports@freebsd.org
Onderwerp: Re: FreeBSD 13 + CertBot + OpenSSL 3 - status?

=C2=A0

On October 24, 2023 14:54:40 DutchDaemon - FreeBSD Forums Administrator <DutchDaemon@FreeBSD.org> wrote:

Does anyone in 'port land' know what the current developments are wrt CertBot (or py-crypto under its hood)?=C2=A0

CertBot is happily compiling against OpenSSL 3 from ports, but when running 'certbot', the crypto side of it talks to the base system OpenSSL 1.1.1, hence failing because the OpenSSL 1.1.1 library does not understand the OpenSSL 3 calls made to it.

From what I understood, this was due to an error/regression in pkgconf(?) which causes some type of 'path reversal' that causes py-crypto to ignore the OpenSSL it was compiled against, favoring the base system library.

I either have to revert a whole lot of servers back to OpenSSL 1.1.1w from ports in order to renew certificates, or wait for "any movement" in getting the path reversal addressed/fixed.

So: does anyone know where we're at with this?

Memory jog:
=C2=A0
=C2=A0
= Traceback (most recent call last):
= =C2=A0File "/usr/local/bin/certbot", line 33, in <module><= /span>
= =C2=A0 =C2=A0sys.exit(load_entry_point('certbot=3D=3D2.6.0',= 'console_scripts', 'certbot')())
= =C2=A0File "/usr/local/bin/certbot", line 25, in importlib_load_entry_point
= =C2=A0 =C2=A0return next(matches).load()
= =C2=A0File "/usr/local/lib/python3.9/importlib/metadata.py", line 86, in load
= =C2=A0 =C2=A0module =3D import_module(match.group('module'))=
= =C2=A0File "/usr/local/lib/python3.9/importlib/__init__.py", line 127, in import_module
= =C2=A0 =C2=A0return _bootstrap._gcd_import(name[level:], package, level)
= =C2=A0File "<frozen importlib._bootstrap>", line 1030, in _gcd_import
= =C2=A0File "<frozen importlib._bootstrap>", line 1007, in _find_and_load
= =C2=A0File "<frozen importlib._bootstrap>", line 986, in _find_and_load_unlocked
= =C2=A0File "<frozen importlib._bootstrap>", line 680, in _load_unlocked
= =C2=A0File "<frozen importlib._bootstrap_external>", line 850, in exec_module
= =C2=A0File "<frozen importlib._bootstrap>", line 228, in _call_with_frames_removed
= =C2=A0File "/usr/local/lib/python3.9/site-packages/certbot/main.py", line 6, in <module>
= =C2=A0 =C2=A0from certbot._internal import main as internal_= main
= =C2=A0File "/usr/local/lib/python3.9/site-packages/certbot/_internal/main.py", line 21, in <module>
= =C2=A0 =C2=A0import josepy as jose
= =C2=A0File "/usr/local/lib/python3.9/site-packages/josepy/__init__.py", line 40, in <module>
= =C2=A0 =C2=A0from josepy.json_util import (
= =C2=A0File "/usr/local/lib/python3.9/site-packages/josepy/json_util.py", line 14, in <module>
= =C2=A0 =C2=A0from OpenSSL import crypto
= =C2=A0File "/usr/local/lib/python3.9/site-packages/OpenSSL/__init__.py", line 8, in <module>
= =C2=A0 =C2=A0from OpenSSL import SSL, crypto
= =C2=A0File "/usr/local/lib/python3.9/site-packages/OpenSSL/SSL.py", line 9, in <module>
= =C2=A0 =C2=A0from OpenSSL._util import (
= =C2=A0File "/usr/local/lib/python3.9/site-packages/OpenSSL/_util.py", line 6, in <module>
= =C2=A0 =C2=A0from cryptography.hazmat.bindings.openssl.bindi= ng import Binding
= =C2=A0File "/usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/open= ssl/binding.py", line 15, in <module>
= =C2=A0 =C2=A0from cryptography.exceptions import InternalErr= or
= =C2=A0File "/usr/local/lib/python3.9/site-packages/cryptography/exceptions.py", line 9, in <module>
= =C2=A0 =C2=A0from cryptography.hazmat.bindings._rust import exceptions as rust_exceptions
= ImportError: /usr/local/lib/pyt= hon3.9/site-packages/cryptography/hazmat/bindings/_rust.abi3.so: Undefined symbol "EVP_default_properties_is_fips_enabled"
=

=C2=A0
--------------YRlRXZkGgsgquuHvDq21ZINS-- --------------CSmHWJPMaYOK8e5aHyYDtuSY-- --------------jw0D29VZbuZRy6krDntw80gZ Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEE9AWUvcZu/lO5r3wZ0R2eb0cya6gFAmU45okFAwAAAAAACgkQ0R2eb0cya6hl 2g//ag+Fd2HLwFs9c5rzpAsDB4L5jo3c+vbpFrSxL2qShAUQAJOREsALhP8HsFzawAlLgq6gRNnd ia28mawQ5w97tWsO+vu9vlHbKJOLLjhMx8wzVjw05QlJCfHLqDdR/W9Osx0RM2KjU3bKgrjpGQXn UAF2C8YcdRDYuiXUIpL5IrRWbcGXy/51vHAdbY4YBNqOrN5nrY20XSxBk2RCyMIzsb+PfdmUSlJl Wu2RYjFSqOrZ7eHbYR8FhKZlIw/K9IcGQWbJu5fepuMc9BU1EBkcaQYFbxgcHe91hP0VlFaj9hhU G9MipUgrEExBrk5c8CXtR/SxR5u1tH+0R8bkeZ1jO/0MCwO2pCNUThh0D1+peER7PhYwH7ROwhl/ ojcK8t3NR0x44pEJ6LEMxfhVF8T6eaIHnFmPQxOGUe9UFI2qJcdcuVC4QnVqQj0N877Sv16/S7oQ gXWGdODF4OP8nGFq9luxF7gnfe4Po1ainPRA4zvEUuHbbzhXz1T0vvO65D3hdiXyWwG5hgFed7bA UtqxgcVhfz/KQkvcamN6H6sC955ER4VqxtUBz382231fNIGHq1ZihNSuCeOFagIc792vsGJEd93I lcvdXMriYcXniqGxNTUTNqIVyFAwRoKG59MoKTfNI5hU6tDL6cbdBXmDCpx/ol1LC+Amj5GQP8Iw zhU= =vv87 -----END PGP SIGNATURE----- --------------jw0D29VZbuZRy6krDntw80gZ--