broken openssl on freebsd60

Benjamin Thelen bt at ccgis.de
Tue Nov 29 14:47:40 GMT 2005 

Russell E. Meek schrieb:
> Benjamin Thelen wrote:
> 
>> Russell E. Meek schrieb:
>>
>>> Jeff D. Hamann wrote:
>>>
>>>>> OpenSSL is in the base system and the library version should be 4, not
>>>>> 3.  Is there some reason you're installing it from the ports?
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> I have no idea. I didn't know it was part of the base system, but 
>>>> when I went to install apache2, postgresql, etc, those ports wanted 
>>>> to install the openssl port or at least they used to.
>>>>
>>>>
>>>>
>>>>
>>>> ----- Original Message ----- From: "Lowell Gilbert" 
>>>> <freebsd-questions-local at be-well.ilk.org>
>>>> To: "Jeff D. Hamann" <jeff.hamann at forestinformatics.com>
>>>> Cc: <freebsd-questions at freebsd.org>
>>>> Sent: Saturday, November 26, 2005 7:29 AM
>>>> Subject: Re: broken openssl on freebsd60
>>>>
>>>>
>>>>> "Jeff D. Hamann" <jeff.hamann at forestinformatics.com> writes:
>>>>>
>>>>>> I should preface this with "I'm not sure if this is correct but I've
>>>>>> got a server running that doesn't make exstensive use of openssl and
>>>>>> everything seems to run alright for the apps I've been running"...
>>>>>>
>>>>>> so,
>>>>>>
>>>>>> I've been trying to install a new server using the openssl port and
>>>>>> keep finding problems with the openssl libs...
>>>>>>
>>>>>> $ pwd
>>>>>> /usr/local/lib
>>>>>> $ ls -la libssl*
>>>>>> -rw-r--r--  1 root  wheel  516602 Nov 26 12:23 libssl.a
>>>>>> lrwxr-xr-x  1 root  wheel      11 Nov 26 12:23 libssl.so -> 
>>>>>> libssl.so.4
>>>>>> -r--r--r--  1 root  wheel  318507 Nov 26 12:23 libssl.so.4
>>>>>> lrwxr-xr-x  1 root  wheel      12 Sep 16 09:59 libssl3.so -> 
>>>>>> libssl3.so.1
>>>>>> -r-xr-xr-x  1 root  wheel  155344 Sep 16 10:00 libssl3.so.1
>>>>>> $
>>>>>>
>>>>>> should those be:
>>>>>>
>>>>>> lrwxr-xr-x  1 root  wheel      12 Sep 16 09:59 libssl3.so -> 
>>>>>> libssl.so.3
>>>>>> -r-xr-xr-x  1 root  wheel  155344 Sep 16 10:00 libssl.so.3
>>>>>>
>>>>>> or some such thing, because when I attempt to start something like
>>>>>> postgresql81, I get:
>>>>>>
>>>>>> $ psql
>>>>>> /libexec/ld-elf.so.1: Shared object "libssl.so.3" not found, required
>>>>>> by "psql"
>>>>>> $
>>>>>>
>>>>>> I need to get the following apps running on the new FREEBSD 6.0 
>>>>>> machine:
>>>>>>
>>>>>> 1) openssl
>>>>>>
>>>>>> then,
>>>>>>
>>>>>> 2) apache2
>>>>>> 3) subversion
>>>>>> 4) uw-imap
>>>>>> 5) postgresql81 or postgresql80+postgis
>>>>>> 6) php
>>>>>>
>>>>>> etc, etc, etc and I'm concerned that none of those will work with the
>>>>>> current status of openssl on freebsd 6.0. I'm running
>>>>>>
>>>>>> $ uname -a
>>>>>> FreeBSD bobby.xxx.xxx 6.0-RELEASE FreeBSD 6.0-RELEASE #1: Fri Nov 18
>>>>>> 10:47:37 PST 2005
>>>>>> hamannj at bobby.xxx.xxx:/usr/obj/usr/src/sys/GENERIC amd64
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> OpenSSL is in the base system and the library version should be 4, not
>>>>> 3.  Is there some reason you're installing it from the ports?
>>>>>
>>>>
>>>> _______________________________________________
>>>> freebsd-questions at freebsd.org mailing list
>>>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>>> To unsubscribe, send any mail to 
>>>> "freebsd-questions-unsubscribe at freebsd.org"
>>>
>>>
>>>
>>>
>>> Another user had a similar issue like this with OpenSSL, here is what 
>>> I advised him to do which in the end worked perfectly.
>>>
>>> Edit your make.conf file *"/etc/make.conf" *and please in the following:
>>>
>>> *WITH_OPENSSL_BASE=yes
>>>
>>> *This will cause all future installed ports to build against the base 
>>> version of OpenSSL rather than trying to install the port version as 
>>> a dependency.
>>>
>>> You can then uninstall the port version of openssl 
>>> *"/usr/ports/security/openssl make deinstall clean"*
>>>
>>> Once the uninstall is complete, reinstall all OpenSSL required ports 
>>> either by using portupgrade or by manually deinstalling and then 
>>> reinstalling the port as they will now build against the base version 
>>> of OpenSSL.
>>>
>>
>>
>> Hi,
>>
>> I already read your posting a few days ago. What I don't understand 
>> is, that openssl is per default within the base system, isn't it? So, 
>> I would suppose that any port, which requires openssl, would take it 
>> from the base rather than from ports? At least, I never installed a 
>> port, installing openssl from ports as a dependency (e.g. php5-openssl).
>>
>> I don't really get it. Could you explain why this switch in make.conf 
>> is needed then?
>>
>> This would also mean, that I would have to upgrade the base system 
>> openssl to openssl-beta in order to be able to install OOo-2 as having 
>> openssl within the base system _and_ openssl-beta as a port obviously 
>> leads to little confusion.
>>
>>
>> Thanks,
>> Ben
>>
>>
>>
>>> Thanks,
>>>
>>> Russell
>>> _______________________________________________
>>> freebsd-questions at freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>> To unsubscribe, send any mail to 
>>> "freebsd-questions-unsubscribe at freebsd.org"
>>
>>
>>
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to 
>> "freebsd-questions-unsubscribe at freebsd.org"
> 
> 
> Ben,
> 
> Sorry about the confusion, make.conf is the global register that all 
> ports look to for build information.
> 
> By default ports requiring dependancies will build these dependancies 
> according to their individual make file (normally ports.)
> 
> (man make.conf) will show you more in depth about what the make.conf is 
> file and many of the global registers that can be used.

Hello Russel,

Thanks for the clarification, I understand now.

> 
> php5-openssl is just a shared extension, how did you install Apache with 
> OpenSSL?  Port or Base?

Base, just "portinstall apache+mod_ssl".

> 
> How are you installing OpenOffice 2 to where it requires OpenSSL, I do 
> not see OpenSSL as a dependancy?

A package from http://porting.openoffice.org/freebsd/. I was suprised, 
too, there actually is no OpenSSL dependancy, but pk_add complains and, 
I think, even stops installing OOo-2. So I was forced to install the 
oSSH-port, because building OOo-2 is a little nightmare :-).


Thanks,
Ben





> 
> Thanks,
> 
> Russell
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"

More information about the freebsd-questions mailing list