2 ms·
> Forcing ports to compile against the security/openssl port > instead of the base version is pretty easy. Yes. I do this currently, and it works great. But
by stock_toaster 11y ago
> Forcing ports to compile against the security/openssl port
> instead of the base version is pretty easy.
Yes. I do this currently, and it works great. But not everyone does, so the security team has to keep abi compatibility.
> The reason the security team has to maintain an API/ABI-compatible release
> of OpenSSL is because FreeBSD releases make that guarantee for all base
> system libraries---and the reason OpenSSL is in the base system in the
> first place is because other things in base like OpenSSH and Heimdal
> require it.
Head scratching That was...kind of my whole point. Anyway, openssl is planned to become private, so I just need to wait a bit (maybe Allan will get it into FreeBSD-11? see[1]).
[1]: https://wiki.freebsd.org/OpenSSL/Base https://wiki.freebsd.org/OpenSSL/Base