Installing openssl from ports

[Jim Ballantine]

Hi,

I understand that heimdal and openssl are both port of the base system and
both install
fine with a system build/install. But when I attempt to install the latest
openssl for the
port system, it fails with a conflict (installs file in the same place)
with heimdal. I've search
the web for an answer but haven't found one and asked the port owner.

So my question is short of editing the Make file to remove the installation
of the file in
conflict, what do I need to do to install the openssl port?

Thanks
Jim Ballantine
_______________________________________________
freebsd-...@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questi...@freebsd.org"

[Jerry]

On Thu, 21 Mar 2013 14:06:52 -0400
Jim Ballantine articulated:

> Hi,
>
> I understand that heimdal and openssl are both port of the base
> system and both install
> fine with a system build/install. But when I attempt to install the
> latest openssl for the
> port system, it fails with a conflict (installs file in the same
> place) with heimdal. I've search
> the web for an answer but haven't found one and asked the port owner.
>
> So my question is short of editing the Make file to remove the
> installation of the file in
> conflict, what do I need to do to install the openssl port?

I have the port version installed also. You need to put this in
your /etc/make.conf file sans quotations marks:
"WITH_OPENSSL_PORT=yes" and then build the port. Be sure to run
"make config" in the port prior to actually building it and that is
about it. If you are building it manually, you might want to run "make
clean" in the port prior to attempting to build it though.

--
Jerry ♔

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the Reply-To header.
__________________________________________________________________

[Shane Ambler]

On 22/03/2013 04:36, Jim Ballantine wrote:

> But when I attempt to install the latest openssl for the
> port system, it fails with a conflict (installs file in the same place)
> with heimdal.

Take a close look at the message and what happens before. openssl only
gives a conflict message if the base version is newer than the port.

Heimdal conflicts with krb4 krb5 and srp

Any other conflicts will be from dependencies, you'll need to check what
port brings in a dependency that generates the conflict.

[Jim Ballantine]

The port is newer than the base version:
port is 1.0.1_8 and the base is 0.9.2

Both openssl and heimdal install fine from the base system src,
it's only when I try to install openssl from the ports, with heimdal
installed by the base system that I get the error.

When I run make install, what I get before the conflict message is:

===> Compressing manual pages for openssl-1.0.1_8zopenssl-1.0.1_8
===> Running ldconfig
/sbin/ldconfig -m /usr/local/lib
Installing openssl-1.0.1_8...pkg: openssl-1.0.1_8 conflicts with
heimdal-1.5.2_4 (installs files into the same place).
Problematic files: /usr/local/man/man3/DH_generate_key.3.gz
*** [fale-pkg] Error code 70

[Shane Ambler]

On 23/03/2013 00:21, Jim Ballantine wrote:

> Both openssl and heimdal install fine from the base system src, it's
> only when I try to install openssl from the ports, with heimdal
> installed by the base system that I get the error.
>
> When I run make install, what I get before the conflict message is:
>
> ===> Compressing manual pages for openssl-1.0.1_8zopenssl-1.0.1_8
> ===> Running ldconfig /sbin/ldconfig -m /usr/local/lib Installing
> openssl-1.0.1_8...pkg: openssl-1.0.1_8 conflicts with
> heimdal-1.5.2_4 (installs files into the same place). Problematic
> files: /usr/local/man/man3/DH_generate_key.3.gz
> *** [fale-pkg] Error code 70

I'll make the subject a bit more descriptive and cc the heimdal
maintainer.

The error appears to be generated by pkg and would indicate that you
have installed heimdal from ports. heimdal uses libcrypto from openssl
and may have been installed as a dependency for another port.

The base system doesn't install into /usr/local and pkg shouldn't
monitor any files installed by the base system, so the conflict with
/usr/local/man/man3/DH_generate_key.3.gz must be from the heimdal port.

I just tried a compile of heimdal within tinderbox where I have set
WITH_OPENSSL_PORT=true and the log for the heimdal indicates that it
deletes man pages installed by security/openssl. So either heimdal
installs a duplicate copy of the openssl man pages or it erroneously
includes the man pages in it's package list generation.

part of tinderbox log -

<snip>
================================================================
====================<phase 7: make package>====================
===> Building package for heimdal-1.5.2_4
Deleting heimdal-1.5.2_4
================================================================

=== Checking filesystem state
list of files present before this port was installed but missing after
it was deinstalled)
./usr/local/man/man3/DES_cbc_cksum.3.gz missing
<snip>
./usr/local/man/man3/DH_free.3.gz missing
./usr/local/man/man3/DH_generate_key.3.gz missing
./usr/local/man/man3/DH_get_default_method.3.gz missing
<snip>
./usr/local/man/man3/RSA_new.3.gz missing
./usr/local/man/man3/RSA_new_method.3.gz missing
./usr/local/man/man3/RSA_set_method.3.gz missing
Deleting sqlite3-3.7.14.1
Deleting openssl-1.0.1_8
pkg_delete: file '/usr/local/man/man3/DH_generate_key.3.gz' doesn't exist
pkg_delete: file '/usr/local/man/man3/DH_new.3.gz' doesn't exist
pkg_delete: file '/usr/local/man/man3/DH_set_method.3.gz' doesn't exist
<snip>
pkg_delete: file '/usr/local/man/man3/DES_set_odd_parity.3.gz' doesn't exist
pkg_delete: file '/usr/local/man/man3/DES_string_to_key.3.gz' doesn't exist
pkg_delete: couldn't entirely delete package `openssl-1.0.1_8'
(perhaps the packing list is incorrectly specified?)
Deleting libtool-2.4.2
Deleting libXt-1.1.1,1
Deleting db41-4.1.25_4
<snip>

[Shane Ambler]

On 26/03/2013 00:42, Jim Ballantine wrote:
> Hi
>
> I had removed the port, but it was reinstalled as a dependency of
> other ports. I have WITH_OPENSSL_PORT=yes in /etc/make.conf, and
> after I do a pkg delete -f heimdal openssl installs fine, but when I
> try to install heimdal from ports (with DISABLE_CONFLICTS=
> openssl-1.0.1_8 in the Makefile) the installs ends with:
>
<snip>
> Stop in /usr/ports/security/heimdal.
>
> So I must be doing something wrong, but what??
>

Your not doing anything wrong, that's why I cc'd the last email to the
heimdal maintainer. I might look at making a patch to fix it today and
submit a PR as it appears the maintainer didn't respond to a previous PR

From what I see heimdal includes the openssl man pages in it's list of
files it installs, the new pkg system is picking up the same files
installed by openssl and heimdal and preventing the conflict, while the
old install system overlooked it.

Either the man pages list is incorrect or heimdal installs a duplicate
copy of the openssl man pages - maybe this could be disabled if openssl
from ports is used.

[Shane Ambler]

On 26/03/2013 11:53, Shane Ambler wrote:

> Either the man pages list is incorrect or heimdal installs a
> duplicate copy of the openssl man pages - maybe this could be
> disabled if openssl from ports is used.

For reference - heimdal includes source for libhcrypto which it uses if
openssl is not present. While it doesn't install libhcrypto it still
installs the man pages which conflicts with the openssl port man pages.

I have submitted a patch to fix this -

http://www.freebsd.org/cgi/query-pr.cgi?pr=177397