Opened 10 years ago

Closed 9 years ago

#44313 closed submission (fixed)

Requesting LibreSSL

Reported by: NotHere Owned by: jeremyhu (Jeremy Huddleston Sequoia)
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: cooljeanius (Eric Gallager), petrrr, jerryyhom, pixilla (Bradley Giesbrecht), rmerpes
Port: libressl

Description

OpenBSD has released libressl-2.0.0 for Linux, Solaris, Mac OS X and FreeBSD. Would like to use it in place of OpenSSL.

How could this be done?

http://undeadly.org/cgi?action=article&sid=20140711201841&mode=flat

Attachments (5)

patch-tls-tls_internal.h.diff (425 bytes) - added by jerryyhom 10 years ago.
Portfile.2 (1.3 KB) - added by jerryyhom 9 years ago.
patch-configure.ac.diff (511 bytes) - added by jerryyhom 9 years ago.
Portfile (1.3 KB) - added by jerryyhom 9 years ago.
patch-Makefile.am.diff (355 bytes) - added by jerryyhom 9 years ago.

Download all attachments as: .zip

Change History (21)

comment:1 Changed 10 years ago by ryandesign (Ryan Carsten Schmidt)

Well, creating a port is hopefully straightforward. Documentation is in our guide.

Using it in place of openssl is more involved. If libressl is indeed designed to be a drop-in replacement for openssl, and uses the same library version number, then all ports that depend on openssl could be modified from port:-style dependencies to path:-style dependencies. If they are not library version compatible, however, then any port that uses openssl and could optionally use libressl would have to have variants added, and openssl and libressl would have to make sure that they don't try to install files to the same locations.

comment:2 Changed 10 years ago by cooljeanius (Eric Gallager)

Cc: egall@… added

Cc Me!

comment:3 Changed 10 years ago by petrrr

Cc: petr@… added

Cc Me!

comment:4 Changed 10 years ago by jerryyhom

Cc: jerryyhom@… added

Cc Me!

comment:5 in reply to:  1 Changed 10 years ago by jerryyhom

Replying to ryandesign@…:

Well, creating a port is hopefully straightforward. Documentation is in our guide.

It is straightforward. I created a basic portfile and successfully rebuilt a port which depends on it.

Using it in place of openssl is more involved. If libressl is indeed designed to be a drop-in replacement for openssl, and uses the same library version number, then all ports that depend on openssl could be modified from port:-style dependencies to path:-style dependencies.

Could someone enlighten me as to what path:-style dependencies mean? (Silly me, I found the Guide section on dependencies.) I do wonder how the MacPorts devs feel about fitting in libressl, such as with port:-style dependencies. I read of a gentoo dev who made a virtual port which depended on libressl to avoid any disruptions; though that seems to me like a short term solution.

If they are not library version compatible, however, then any port that uses openssl and could optionally use libressl would have to have variants added, and openssl and libressl would have to make sure that they don't try to install files to the same locations.

According to libressl, it is designed to be a drop-in replacement, so ports should not use openssl *and* libressl, or even optionally as variants. As a replacement, libressl does install very nearly the same set of headers/libraries.

Last edited 10 years ago by jerryyhom (previous) (diff)

comment:6 Changed 10 years ago by jerryyhom

I am attaching the portfile I created for libressl. I also have a few patches. As a drop-in replacement for openssl, installing libressl requires deactivating openssl, plus dependent ports need rebuilding against libressl's libraries via updating their Portfile. Comments appreciated.

comment:7 Changed 10 years ago by mf2k (Frank Schima)

Port: libressl added
Type: requestsubmission
Version: 2.3.1

Thanks!

comment:8 Changed 10 years ago by pixilla (Bradley Giesbrecht)

Cc: pixilla@… added

Cc Me!

comment:9 Changed 10 years ago by rmerpes

Cc: rmerpes@… added

Cc Me!

Changed 10 years ago by jerryyhom

Changed 9 years ago by jerryyhom

Attachment: Portfile.2 added

Changed 9 years ago by jerryyhom

Attachment: patch-configure.ac.diff added

comment:10 Changed 9 years ago by jerryyhom

In the attached files, Portfile.2 is identical to Portfile (forgot to check the overwrite box) and could be removed, if possible. The patches for Makefile and tls_internal are unchanged and necessary.

Changed 9 years ago by jerryyhom

Attachment: Portfile added

Changed 9 years ago by jerryyhom

Attachment: patch-Makefile.am.diff added

comment:11 Changed 9 years ago by jeremyhu (Jeremy Huddleston Sequoia)

+universal is failing.

The i386 build attempts to compile aes-macosx-x86_64.s ... need to figure that out.

/usr/bin/clang -pipe -O0 -g3 -arch i386 -Wall -std=gnu99 -fno-strict-aliasing -fno-strict-overflow -D_FORTIFY_SOURCE=2 -fstack-protector-strong -c aes/aes-macosx-x86_64.s  -fno-common -DPIC -o aes/.libs/aes-macosx-x86_64.o

comment:12 Changed 9 years ago by jeremyhu (Jeremy Huddleston Sequoia)

comment:13 Changed 9 years ago by jeremyhu (Jeremy Huddleston Sequoia)

Gonna rebuild a bunch of ports and then revbump libressl to set openssldir, etc that I missed.

comment:14 Changed 9 years ago by jeremyhu (Jeremy Huddleston Sequoia)

Owner: changed from macports-tickets@… to jeremyhu@…

comment:15 Changed 9 years ago by jeremyhu (Jeremy Huddleston Sequoia)

Updated dependents in r139229

comment:16 Changed 9 years ago by jeremyhu (Jeremy Huddleston Sequoia)

Resolution: fixed
Status: newclosed

r139230 fixes the path to cert.pem

Note: See TracTickets for help on using tickets.