ports/119546

[Andrea Venturoli]

Hello.

Altough closed in 2008, I'm still it by this bug.

> # uname -a
> FreeBSD xxxxxx.xxxxx 9.1-RELEASE-p2 FreeBSD 9.1-RELEASE-p2 #1 r249400: Mon Apr 22 13:00:32 CEST 2013     root at xxxxxx.xxxxx:/usr/obj/usr/src/sys/XXXXXX  i386

> # ldd /usr/bin/ssh
> /usr/bin/ssh:
> 	libssh.so.5 => /usr/lib/libssh.so.5 (0x33c8c000)
> 	libutil.so.9 => /lib/libutil.so.9 (0x33cd7000)
> 	libz.so.6 => /lib/libz.so.6 (0x33cea000)
> 	libgssapi.so.10 => /usr/lib/libgssapi.so.10 (0x33cfe000)
> 	libcrypt.so.5 => /lib/libcrypt.so.5 (0x33d07000)
> 	libcrypto.so.6 => /lib/libcrypto.so.6 (0x33d2c000)
> 	libc.so.7 => /lib/libc.so.7 (0x33e88000)
> 	libkrb5.so.10 => /usr/lib/libkrb5.so.10 (0x33fb2000)
> 	libhx509.so.10 => /usr/lib/libhx509.so.10 (0x34010000)
> 	libasn1.so.10 => /usr/lib/libasn1.so.10 (0x34046000)
> 	libcom_err.so.5 => /usr/lib/libcom_err.so.5 (0x340bb000)
> 	libmd.so.5 => /lib/libmd.so.5 (0x340bd000)
> 	libroken.so.10 => /usr/lib/libroken.so.10 (0x340d5000)

> # ldd /usr/local/lib/nss_ldap.so.1
> /usr/local/lib/nss_ldap.so.1:
> 	libldap-2.3.so.2 => /usr/local/lib/libldap-2.3.so.2 (0x33dc7000)
> 	liblber-2.3.so.2 => /usr/local/lib/liblber-2.3.so.2 (0x33df9000)
> 	libsasl2.so.3 => /usr/local/lib/libsasl2.so.3 (0x33e05000)
> 	libkrb5.so.10 => /usr/lib/libkrb5.so.10 (0x33e1e000)
> 	libcom_err.so.5 => /usr/lib/libcom_err.so.5 (0x33e7c000)
> 	libgssapi_krb5.so.10 => /usr/lib/libgssapi_krb5.so.10 (0x33e7e000)
> 	libc.so.7 => /lib/libc.so.7 (0x33c6c000)
> 	libssl.so.8 => /usr/local/lib/libssl.so.8 (0x33e95000)
> 	libcrypto.so.8 => /usr/local/lib/libcrypto.so.8 (0x34400000)
> 	libasn1.so.10 => /usr/lib/libasn1.so.10 (0x33eee000)
> 	libcrypt.so.5 => /lib/libcrypt.so.5 (0x33f63000)
> 	libcrypto.so.6 => /lib/libcrypto.so.6 (0x3457c000)
> 	libhx509.so.10 => /usr/lib/libhx509.so.10 (0x33f88000)
> 	libroken.so.10 => /usr/lib/libroken.so.10 (0x33fbe000)
> 	libgssapi.so.10 => /usr/lib/libgssapi.so.10 (0x33fce000)
> 	libthr.so.3 => /lib/libthr.so.3 (0x33fd7000)

Removing the openssl port is not a viable option for me, since:
> # pkg_info -R openssl\* | wc
>      200     199    3671

I had a look at /usr/ports/net/openldap23-server/Makefile and only found:
> USE_OPENSSL=            yes

AFAICT this does not give any preference wrt to base vs port openssl; if 
I'm correct this means the port is choosen if installed, but, otherwise, 
openssl from base is used.

Wouldn't it be better to use base only? Put a knot to give the user a 
choice?

Would I screw too many things if I tried adding:
> WITH_OPENSSL_BASE=yes



  bye & Thanks
	av.