Openssl trouble :)

S

solven

Hello, everybody!
I need help with Openssl Upgrading.

I had old version
Code: 
OpenSSL 0.9.7e-p1 25 Oct 2004
Yesterday I've updated it with help of portsnap(8) & portmaster(8).
Edited before /etc/make.conf.
Code: 
WITH_OPENSSL_PORT=yes

Now I have 2 version of Openssl, I can't understand, whats going on :)
Code: 
[b]root#[/b] openssl version
OpenSSL 0.9.7e-p1 25 Oct 2004
[b]root#[/b] which openssl
/usr/bin/openssl

and
Code: 
[b]root#[/b] /usr/local/bin/openssl version
WARNING: can't open config file: /usr/local/openssl/openssl.cnf
OpenSSL 1.0.1c 10 May 2012

Code: 
[b]root#[/b] /usr/bin/openssl version
OpenSSL 0.9.7e-p1 25 Oct 2004

How to update it correctly? And why I have 2 installed OpenSSL versions? :)
 
Ok, understand, thanks.

And how to update apps - apache, ejabberd and so on, that they start using new openssl version?
 
I'm also very doubtful a current ports tree will work on that version, it's unsupported after all.
 
Dear all,

Appreciate if anyone can explain to me what does this code means when add into /etc/make.conf? What is the different with and without this line of modification?

Code: 
WITH_OPENSSL_PORT=yes
 
wblock@ said:
It means "if any port I compile has an option to use OpenSSL, use it". It pre-enables that option.
Click to expand...
I though it meant "use the version of SSL from ports instead of the (older) version in the base system"?
 
Terry_Kennedy said:
I though it meant "use the version of SSL from ports instead of the (older) version in the base system"?
Click to expand...

/usr/bin/openssl is included in the base system.
/usr/local/bin/openssl is installed by the security/openssl port.
Click to expand...

But if I have two version of OpenSSL in my OS, and I have the newer on in /usr/local/bin/openssl, may I know will compile with the newer on automatically by itself?
 
Ports use the OpenSSL binary returned by
# which openssl
and the OpenSSL libraries returned by
# pkg-config --libs openssl
at the time the port is built.
 
Terry_Kennedy said:
I though it meant "use the version of SSL from ports instead of the (older) version in the base system"?
Click to expand...

Doh... WITH_OPENSSL_PORT. Yes, you're right. Besides just forcing the use of the port version, some ports also have this because FreeBSD 7.x did not have OpenSSL in the base.

From /usr/ports/Mk/bsd.openssl.mk:
Code: 
# WITH_OPENSSL_PORT=yes - Use the port, even if base is up to date
 
You must log in or register to reply here.
Back
Top