Page MenuHomeFreeBSD

libcrypto: move engines and modules to openssl-lib
ClosedPublic

Authored by ivy on May 4 2025, 10:56 AM.
Tags
None
Referenced Files
F133446470: D50144.diff
Sat, Oct 25, 8:58 PM
Unknown Object (File)
Fri, Oct 24, 5:39 AM
Unknown Object (File)
Thu, Oct 23, 12:43 AM
Unknown Object (File)
Tue, Oct 21, 8:32 AM
Unknown Object (File)
Sun, Oct 19, 5:33 PM
Unknown Object (File)
Sep 24 2025, 12:59 AM
Unknown Object (File)
Sep 22 2025, 2:20 PM
Unknown Object (File)
Sep 21 2025, 1:31 PM
Subscribers

Details

Summary

currently, some OpenSSL-related files end up in the utilities package:

/usr/lib/engines-3/capi.so
/usr/lib/engines-3/devcrypto.so
/usr/lib/engines-3/loader_attic.so
/usr/lib/engines-3/padlock.so
/usr/lib/ossl-modules/legacy.so

since these are part of OpenSSL and are not useful without it, move them
to the openssl-lib package.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 63921
Build 60805: arc lint + arc unit

Event Timeline

ivy requested review of this revision.May 4 2025, 10:56 AM
This revision is now accepted and ready to land.May 4 2025, 7:44 PM

I'm uneasy with the name of this new package; it sounds like it should contain the openssl library, but it doesn't. Can we name it openssl-engines instead?

In D50144#1144184, @des wrote:

I'm uneasy with the name of this new package; it sounds like it should contain the openssl library, but it doesn't.

but it does:

% pkg info -l freebsd-openssl-lib
FreeBSD-openssl-lib-15.snap20250504111358:
        /lib/libcrypto.so.30
        /usr/lib/libssl.so.30

i think what happened here is someone added PACKAGE=openssl-lib to secure/lib/libcrypto/Makefile and assumed it would be recursive, but it's not, you have to set it in every subdir as well.

My mistake, I thought this was a new package just for the engines.

secure/lib/libcrypto/engines/capi/Makefile
1 ↗(On Diff #154785)

We discussed out-of-band moving the default PACKAGE to engines/Makefile.inc (and the below to modules/Makefile.inc) to remove a bit of redundancy.

use Makefile.inc to do this instead

This revision now requires review to proceed.May 5 2025, 9:38 PM
This revision is now accepted and ready to land.May 5 2025, 9:47 PM