Page MenuHomeFreeBSD

libcrypto: move engines and modules to openssl-lib
ClosedPublic

Authored by ivy on May 4 2025, 10:56 AM.
Tags
None
Referenced Files
Unknown Object (File)
Wed, Jul 1, 10:22 AM
Unknown Object (File)
Mon, Jun 29, 6:03 PM
Unknown Object (File)
Thu, Jun 25, 11:30 AM
Unknown Object (File)
Thu, Jun 25, 7:30 AM
Unknown Object (File)
Wed, Jun 24, 4:56 PM
Unknown Object (File)
Wed, Jun 24, 10:54 AM
Unknown Object (File)
Mon, Jun 22, 12:00 AM
Unknown Object (File)
Mon, Jun 15, 12:54 PM
Subscribers

Details

Summary

currently, some OpenSSL-related files end up in the utilities package:

/usr/lib/engines-3/capi.so
/usr/lib/engines-3/devcrypto.so
/usr/lib/engines-3/loader_attic.so
/usr/lib/engines-3/padlock.so
/usr/lib/ossl-modules/legacy.so

since these are part of OpenSSL and are not useful without it, move them
to the openssl-lib package.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

ivy requested review of this revision.May 4 2025, 10:56 AM
This revision is now accepted and ready to land.May 4 2025, 7:44 PM

I'm uneasy with the name of this new package; it sounds like it should contain the openssl library, but it doesn't. Can we name it openssl-engines instead?

In D50144#1144184, @des wrote:

I'm uneasy with the name of this new package; it sounds like it should contain the openssl library, but it doesn't.

but it does:

% pkg info -l freebsd-openssl-lib
FreeBSD-openssl-lib-15.snap20250504111358:
        /lib/libcrypto.so.30
        /usr/lib/libssl.so.30

i think what happened here is someone added PACKAGE=openssl-lib to secure/lib/libcrypto/Makefile and assumed it would be recursive, but it's not, you have to set it in every subdir as well.

My mistake, I thought this was a new package just for the engines.

secure/lib/libcrypto/engines/capi/Makefile
1 ↗(On Diff #154785)

We discussed out-of-band moving the default PACKAGE to engines/Makefile.inc (and the below to modules/Makefile.inc) to remove a bit of redundancy.

use Makefile.inc to do this instead

This revision now requires review to proceed.May 5 2025, 9:38 PM
This revision is now accepted and ready to land.May 5 2025, 9:47 PM