Possible to figure out if CURL is using SSL (FreeBSD 13.5-RELEASE-p11 & curl-8.17.0)

Aknot · 2026-03-27T06:06:57+0000

Curl 8.18 seems to have dropped support for OpenSSL versions below 3.x.

Code:

checking for OpenSSL >= v3... configure: error: OpenSSL 3.0.0 or upper required.

Is there a way to figure out if CURL is using the SSL option on our system, running FreeBSD 13.5-RELEASE-p11?
We have tried the lsof command: lsof -i :443 | grep libcurl but that doesn't give us something.

Our server is running latest latest Magento on Apache with MariaDB among othe things.

Thanks,

BjarneB · 2026-03-27T07:19:50+0000

pkg info curl ?

Charlie_ · 2026-03-27T08:13:08+0000

By default, version 13.x depend on WolfSSL instead of OpenSSL.

ftp/curl/Makefile
OPTIONS_DEFAULT_13= WOLFSSL

Initially, it was modified to depend on gnutls, but as usual, it was a matter of commit, revert, commit.

Alain De Vos · 2026-03-27T08:25:58+0000

I have in make.conf:
DEFAULT_VERSIONS+=ssl=openssl35

Charlie_ · 2026-03-27T08:28:16+0000

Making sure you're not a bot!

Given that sunpoet@ and diizzy@ are involved, the reverting was an expected development.

Alain De Vos · 2026-03-27T08:31:40+0000

fyi,

Code:

ldd /usr/local/bin/curl | grep -i ssl
    libssl.so.17 => /usr/local/lib/libssl.so.17 (0x39a21bc54000)
root@myfreebsd:~ # pkg which /usr/local/lib/libssl.so.17
/usr/local/lib/libssl.so.17 was installed by package openssl35-3.5.5

fernandel · 2026-03-27T09:35:18+0000

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=293734

Aknot · 2026-03-27T17:03:47+0000

Thanks everyone!

I'm an "end user" and not sure what to do here.

We're on the FreeBSD 13.x "built in" OpenSSL, since I was told that installing a newer OpenSSL versions from ports, could cause problems, and I don't like problems.

I tried to switch to gnutls by running make config, but getting this instead:

Code:

====> You cannot select multiple options from the SSL radio
=====> Only one of these must be defined: GNUTLS OPENSSL
*** Error code 1
...

I'm guessing I'm stuck on curl-8.17.0

atax1a · 2026-03-27T17:14:35+0000

Aknot said:
We have tried the lsof command: lsof -i :443 | grep libcurl but that doesn't give us something.

What gave you the idea to run that command? It doesn't make very much sense to me, as curl does not usually listen itself on any port.

We would use curl -V to show the compilation options:

Code:

π curl -V
curl 8.4.0 (amd64-portbld-freebsd13.2) libcurl/8.4.0 OpenSSL/1.1.1t zlib/1.2.13 libpsl/0.21.2 (+libidn2/2.3.4) libssh2/1.11.0 nghttp2/1.58.0
Release-Date: 2023-10-11
Protocols: dict file ftp ftps gopher gophers http https imap imaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp
Features: alt-svc AsynchDNS GSS-API HSTS HTTP2 HTTPS-proxy IPv6 Kerberos Largefile libz NTLM NTLM_WB PSL SPNEGO SSL threadsafe TLS-SRP UnixSockets