[Bug 241312] sysutils/logstash6 Cipher Error

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=241312

--- Comment #9 from Greg Lewis <glewis at FreeBSD.org> ---
I need to get into this deeper, but some other potential concerns:

* netty-tcnative looks like it will build native libraries against libressl,
boringssl, and openssl.  You can't have all of those installed at once from
ports because they conflict with each other (boringssl doesn't list the
conflict, but it clearly has it).  So there are some gymnastics that would need
to happen there to allow the full netty-tcnative build to work.

* The JAR in logstash isn't the full netty-tcnative JAR, it's the one linked
against boringssl based on the name
(netty-tcnative-boringssl-static-2.0.12.Final.jar).  That's unfortunate in that
I'm guessing boringssl is the least likely of the three for someone to have
installed (given the general state of the project and port).

One question I have here, without knowing the answer yet, is whether LogStash
is doing anything that is specific to boringssl?  My guess would be no, since
the tc-native code allows all three libraries to potentially be used as the
native component.

If that is the case, then it might be possible to build a native library for
FreeBSD using whatever SSL lib is set as the default or maybe ignore ports
altogether and build it against the system installed version.  The dependency
on apr might mean we have to use the version in ports though, I haven't checked
into that.  Were that the case, it might make more sense to do it within the
LogStash port and just build that library and add it into the JAR rather than
attempt a general netty-tcnative port since that is going to have problems.

Is someone either able to test or willing to share configuration files and
testing steps if I were to try and put something like that together?

-- 
You are receiving this mail because:
You are the assignee for the bug.