<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Feb 7, 2021 at 12:33 AM Tim Mooney via oi-dev <<a href="mailto:oi-dev@openindiana.org">oi-dev@openindiana.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">In regard to: Re: [oi-dev] OpenSSL update process, Aurélien Larcher said...:<br>
<br>
> OpenSSL 1.1 is now merged:<br>
><br>
> 1. The mediator is default set to 1.0 but can be safely set to 1.1.<br>
<br>
Is changing the mediator supposed to make /usr/include/openssl/<whatever><br>
available, or is that supposed to be done by <a href="http://shared-macros.mk" rel="noreferrer" target="_blank">shared-macros.mk</a> after<br>
setting USE_OPENSSL11=yes, or do we now need to specify<br>
-I$(OPENSSL_PREFIX)/include in the component Makefile?<br>
<br>
I've changed the mediator and done a git pull to get the latest<br>
oi-userland bits. 'gmake update' now works in e.g.<br>
components/perl/net-ssleay/ but the build step doesn't know where to look<br>
for the headers.<br></blockquote><div><br></div><div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">If /usr/include/openssl does not point anywhere probably the mediator is not set to a right version or openssl-11 is not installed:</div><div style="font-size:small" class="gmail_default"><span style="font-family:monospace"><br></span></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><span style="font-family:monospace">narval> pkg mediator openssl<br>MEDIATOR VER. SRC. VERSION IMPL. SRC. IMPLEMENTATION<br>openssl local 1.1 local openssl<br></span></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><span style="font-family:monospace"><br></span></div><span style="font-family:monospace">narval> ls -lha /usr/include/openssl<br>lrwxrwxrwx 1 root staff 30 Feb 5 22:54 /usr/include/openssl -> ../openssl/1.1/include/openssl</span><br></div><div><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">But you should not need to change the mediator to build the package unless the component's own build system is buggy.</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">In any case openssl-11 should install automatically at your next update since I pushed a new wget package depending on it.</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Do not hesitate if you have any other questions.</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Also you can report if the 'gmake update' trick does not work for some components, it is after all based on a hastily written piece of python by a non-python developer :P</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Kind regards,</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Aurélien<br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
> 2. illumos-gate is patched to accept library/security/openssl-11 as<br>
> dependency so that it builds when the mediator version is 1.1.<br>
> 3. oi-userland has now a switch USE_OPENSSL10=yes or USE_OPENSSL11=yes<br>
> which should be placed before <a href="http://shared-macros.mk" rel="noreferrer" target="_blank">shared-macros.mk</a> is included.<br>
> 4. If 'gmake update' is executed in a component depending on OpenSSL then<br>
> the switch is made to OpenSSL 1.1 unless USE_OPENSSL10=yes is set.<br>
><br>
> Now the fun begins:<br>
><br>
> 3. Move all the components supporting OpenSSL 1.1 or update them.<br>
>> 4. Deprecate possible rotting components which cannot be updated and may<br>
>> cause security issues.<br>
>><br>
><br>
> and... the more, the merrier!<br>
<br>
Tim<br>
-- <br>
Tim Mooney <a href="mailto:Tim.Mooney@ndsu.edu" target="_blank">Tim.Mooney@ndsu.edu</a><br>
Enterprise Computing & Infrastructure /<br>
Division of Information Technology / 701-231-1076 (Voice)<br>
North Dakota State University, Fargo, ND 58105-5164_______________________________________________<br>
oi-dev mailing list<br>
<a href="mailto:oi-dev@openindiana.org" target="_blank">oi-dev@openindiana.org</a><br>
<a href="https://openindiana.org/mailman/listinfo/oi-dev" rel="noreferrer" target="_blank">https://openindiana.org/mailman/listinfo/oi-dev</a><br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><font style="font-family:courier new,monospace" size="1">---<br>Praise the Caffeine embeddings<br></font></div></div></div></div></div>