php 4.3.10, manual installation

2007-07-09 Thread zbigniew

Hello, 

I currently have php 4.4.7 on my FBSD machine but due to some requirements
I need to downgrade to php 4.3.10. It will be for an offline machine so I
am not worried about possible security holes but I would like to ask how
you would advise me to downgrade? 

1. Delete php using pkg_delete?  
2. Unpack 4.3.10 sources and... yes... what should I do here? 

Just copy them where php gets installed by default?

I am not able to use port for this (I usually install all software via
portinstall) as this version is no longer maintained. 

But I'd appreciate your help. I do not want to make mess on this machine as
I have it quite nicely customized so I thought I'd ask for your advice. 

Thank you! 

Zbigniew Szalbot 

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: php 4.3.10, manual installation

2007-07-09 Thread Josh Paetzel
On Monday 09 July 2007, [EMAIL PROTECTED] wrote:
 Hello,

 I currently have php 4.4.7 on my FBSD machine but due to some
 requirements I need to downgrade to php 4.3.10. It will be for an
 offline machine so I am not worried about possible security holes
 but I would like to ask how you would advise me to downgrade?

 1. Delete php using pkg_delete?
 2. Unpack 4.3.10 sources and... yes... what should I do here?

 Just copy them where php gets installed by default?

 I am not able to use port for this (I usually install all software
 via portinstall) as this version is no longer maintained.

 But I'd appreciate your help. I do not want to make mess on this
 machine as I have it quite nicely customized so I thought I'd ask
 for your advice.

 Thank you!

 Zbigniew Szalbot


I would take a look at cvsweb.freebsd.org and find out when PHP 4.3.10 
was in ports, then roll back your ports tree to that date with cvsup 
and install it from ports.

So in this case the commit that updated the port to 4.3.11 was on Mon 
April 4 2005, so if you roll back the ports tree to April 1 you'll be 
fine.

You'll need cvsup for this.

In your ports-supfile add the following line:

*default date=2005.04.01.00.00.00

If you have the current versions of gettext, libtool, m4, perl, and 
expat installed you can simply roll back the lang directory with 
cvsup, saving you from rolling back the entire tree by commenting out 
ports-all, and uncommenting ports-base and ports-lang

Otherwise, if you want to install the versions of the dependancies 
that were current at the time of php 4.3.10 you'll want to roll back 
the entire tree.

After you run cvsup you can just portinstall it or 
cd /usr/ports/lang/php4  make install clean

HTH

-- 
Thanks,

Josh Paetzel


pgpIcvWLKOPvE.pgp
Description: PGP signature


Re: php 4.3.10, manual installation

2007-07-09 Thread zbigniew

Hello,

 I would take a look at cvsweb.freebsd.org and find out when PHP 4.3.10 
 was in ports, then roll back your ports tree to that date with cvsup 
 and install it from ports.
 
 So in this case the commit that updated the port to 4.3.11 was on Mon 
 April 4 2005, so if you roll back the ports tree to April 1 you'll be 
 fine.
 
 You'll need cvsup for this.
 
 In your ports-supfile add the following line:
 
 *default date=2005.04.01.00.00.00
 
 If you have the current versions of gettext, libtool, m4, perl, and 
 expat installed you can simply roll back the lang directory with 
 cvsup, saving you from rolling back the entire tree by commenting out 
 ports-all, and uncommenting ports-base and ports-lang
 
 Otherwise, if you want to install the versions of the dependancies 
 that were current at the time of php 4.3.10 you'll want to roll back 
 the entire tree.
 
 After you run cvsup you can just portinstall it or 
 cd /usr/ports/lang/php4  make install clean

All clear but when I go to install this particular version of PHP I am
(rightly) warned about its multiple known vulnerabilities. I read man
portinstall but don't think I have seen information how to temporarily
switch this security check off when installing a port.

Many thanks in advance!

Zbigniew Szalbot

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: php 4.3.10, manual installation

2007-07-09 Thread Josh Paetzel
On Monday 09 July 2007, [EMAIL PROTECTED] wrote:
 Hello,

  I would take a look at cvsweb.freebsd.org and find out when PHP
  4.3.10 was in ports, then roll back your ports tree to that date
  with cvsup and install it from ports.
 
  So in this case the commit that updated the port to 4.3.11 was on
  Mon April 4 2005, so if you roll back the ports tree to April 1
  you'll be fine.
 
  You'll need cvsup for this.
 
  In your ports-supfile add the following line:
 
  *default date=2005.04.01.00.00.00
 
  If you have the current versions of gettext, libtool, m4, perl,
  and expat installed you can simply roll back the lang directory
  with cvsup, saving you from rolling back the entire tree by
  commenting out ports-all, and uncommenting ports-base and
  ports-lang
 
  Otherwise, if you want to install the versions of the
  dependancies that were current at the time of php 4.3.10 you'll
  want to roll back the entire tree.
 
  After you run cvsup you can just portinstall it or
  cd /usr/ports/lang/php4  make install clean

 All clear but when I go to install this particular version of PHP I
 am (rightly) warned about its multiple known vulnerabilities. I
 read man portinstall but don't think I have seen information how to
 temporarily switch this security check off when installing a port.

 Many thanks in advance!

 Zbigniew Szalbot


make -DDISABLE_VULNERABILITIES install

-- 
Thanks,

Josh Paetzel


pgpeG5D3QQpb7.pgp
Description: PGP signature


Re: php 4.3.10, manual installation

2007-07-09 Thread Zbigniew Szalbot

Hi there,

On Mon, 9 Jul 2007 16:54:16 -0500, Josh Paetzel [EMAIL PROTECTED] wrote:
 On Monday 09 July 2007, [EMAIL PROTECTED] wrote:
 Hello,

  I would take a look at cvsweb.freebsd.org and find out when PHP
  4.3.10 was in ports, then roll back your ports tree to that date
  with cvsup and install it from ports.
 
  So in this case the commit that updated the port to 4.3.11 was on
  Mon April 4 2005, so if you roll back the ports tree to April 1
  you'll be fine.
 
  You'll need cvsup for this.
 
  In your ports-supfile add the following line:
 
  *default date=2005.04.01.00.00.00
 
  If you have the current versions of gettext, libtool, m4, perl,
  and expat installed you can simply roll back the lang directory
  with cvsup, saving you from rolling back the entire tree by
  commenting out ports-all, and uncommenting ports-base and
  ports-lang
 
  Otherwise, if you want to install the versions of the
  dependancies that were current at the time of php 4.3.10 you'll
  want to roll back the entire tree.
 
  After you run cvsup you can just portinstall it or
  cd /usr/ports/lang/php4  make install clean

 All clear but when I go to install this particular version of PHP I
 am (rightly) warned about its multiple known vulnerabilities. I
 read man portinstall but don't think I have seen information how to
 temporarily switch this security check off when installing a port.

 Many thanks in advance!

 Zbigniew Szalbot

 
 make -DDISABLE_VULNERABILITIES install

Thanks for your patience! However, when I try I get:

make -DDISABLE_VULNERABILITIES install clean
Dependency warning: used OpenSSL version contains known vulnerabilities
Please update or define either WITH_OPENSSL_BASE or WITH_OPENSSL_PORT
*** Error code 1

Stop in /usr/ports/lang/php4.

Now I did include WITH_OPENSSL_PORT=1 in pkgtools.conf for php4 but it does
not seem to take any effect. I also tried inserting
WITH_DISABLE_VULNERABILITIES=1 in this file but it did not help.

Thank you!

Zbigniew Szalbot

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: php 4.3.10, manual installation

2007-07-09 Thread Josh Paetzel
On Monday 09 July 2007, Zbigniew Szalbot wrote:
 Hi there,

 On Mon, 9 Jul 2007 16:54:16 -0500, Josh Paetzel [EMAIL PROTECTED] 
wrote:
  On Monday 09 July 2007, [EMAIL PROTECTED] wrote:
  Hello,
 
   I would take a look at cvsweb.freebsd.org and find out when
   PHP 4.3.10 was in ports, then roll back your ports tree to
   that date with cvsup and install it from ports.
  
   So in this case the commit that updated the port to 4.3.11 was
   on Mon April 4 2005, so if you roll back the ports tree to
   April 1 you'll be fine.
  
   You'll need cvsup for this.
  
   In your ports-supfile add the following line:
  
   *default date=2005.04.01.00.00.00
  
   If you have the current versions of gettext, libtool, m4,
   perl, and expat installed you can simply roll back the lang
   directory with cvsup, saving you from rolling back the entire
   tree by commenting out ports-all, and uncommenting ports-base
   and ports-lang
  
   Otherwise, if you want to install the versions of the
   dependancies that were current at the time of php 4.3.10
   you'll want to roll back the entire tree.
  
   After you run cvsup you can just portinstall it or
   cd /usr/ports/lang/php4  make install clean
 
  All clear but when I go to install this particular version of
  PHP I am (rightly) warned about its multiple known
  vulnerabilities. I read man portinstall but don't think I have
  seen information how to temporarily switch this security check
  off when installing a port.
 
  Many thanks in advance!
 
  Zbigniew Szalbot
 
  make -DDISABLE_VULNERABILITIES install

 Thanks for your patience! However, when I try I get:

 make -DDISABLE_VULNERABILITIES install clean
 Dependency warning: used OpenSSL version contains known
 vulnerabilities Please update or define either WITH_OPENSSL_BASE or
 WITH_OPENSSL_PORT *** Error code 1

 Stop in /usr/ports/lang/php4.

 Now I did include WITH_OPENSSL_PORT=1 in pkgtools.conf for php4 but
 it does not seem to take any effect. I also tried inserting
 WITH_DISABLE_VULNERABILITIES=1 in this file but it did not help.

 Thank you!

 Zbigniew Szalbot


Right, because pkgtools.conf isn't used by the ports treeso add 
in -DWITH_OPENSSL_PORT to the mix


-- 
Thanks,

Josh Paetzel


pgpa3sadv5P1H.pgp
Description: PGP signature


Re: php 4.3.10, manual installation

2007-07-09 Thread Zbigniew Szalbot

Hello again,

On Mon, 9 Jul 2007 17:57:32 -0500, Josh Paetzel [EMAIL PROTECTED] wrote:
 make -DDISABLE_VULNERABILITIES install clean
 Dependency warning: used OpenSSL version contains known
 vulnerabilities Please update or define either WITH_OPENSSL_BASE or
 WITH_OPENSSL_PORT *** Error code 1

 Stop in /usr/ports/lang/php4.

 Now I did include WITH_OPENSSL_PORT=1 in pkgtools.conf for php4 but
 it does not seem to take any effect. I also tried inserting
 WITH_DISABLE_VULNERABILITIES=1 in this file but it did not help.

 Thank you!

 Zbigniew Szalbot

 
 Right, because pkgtools.conf isn't used by the ports treeso add 
 in -DWITH_OPENSSL_PORT to the mix

Not much luck. The installation started but then came to a halt:

making links in engines...
making links in apps...
making links in test...
making links in tools...
generating dummy tests (if needed)...

Since you've disabled or enabled at least one algorithm, you need to do
the following before building:

make depend

Configured for BSD-x86-elf.
-e: not found
*** Error code 127

Stop in /usr/ports/security/openssl.
*** Error code 1

Stop in /usr/ports/lang/php4.

OK. I ran make depend and then repeated 
make -DDISABLE_VULNERABILITIES -DWITH_OPENSSL_PORT install clean

However, it stopped at the same location with the same error message. Time
to give up?

Thanks!


Zbigniew Szalbot



___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: php 4.3.10, manual installation

2007-07-09 Thread Josh Paetzel
On Monday 09 July 2007, Zbigniew Szalbot wrote:
 Hello again,

 On Mon, 9 Jul 2007 17:57:32 -0500, Josh Paetzel [EMAIL PROTECTED] 
wrote:
  make -DDISABLE_VULNERABILITIES install clean
  Dependency warning: used OpenSSL version contains known
  vulnerabilities Please update or define either WITH_OPENSSL_BASE
  or WITH_OPENSSL_PORT *** Error code 1
 
  Stop in /usr/ports/lang/php4.
 
  Now I did include WITH_OPENSSL_PORT=1 in pkgtools.conf for php4
  but it does not seem to take any effect. I also tried inserting
  WITH_DISABLE_VULNERABILITIES=1 in this file but it did not help.
 
  Thank you!
 
  Zbigniew Szalbot
 
  Right, because pkgtools.conf isn't used by the ports treeso
  add in -DWITH_OPENSSL_PORT to the mix

 Not much luck. The installation started but then came to a halt:

 making links in engines...
 making links in apps...
 making links in test...
 making links in tools...
 generating dummy tests (if needed)...

 Since you've disabled or enabled at least one algorithm, you need
 to do the following before building:

 make depend

 Configured for BSD-x86-elf.
 -e: not found
 *** Error code 127

 Stop in /usr/ports/security/openssl.
 *** Error code 1

 Stop in /usr/ports/lang/php4.

 OK. I ran make depend and then repeated
 make -DDISABLE_VULNERABILITIES -DWITH_OPENSSL_PORT install clean

 However, it stopped at the same location with the same error
 message. Time to give up?

 Thanks!


 Zbigniew Szalbot


Never give up, never surrender!

Try using the base openssl, it's the better choice in most cases 
anyways.  make -DDISABLE_VULNERABILITIES -DWITH_OPENSSL_BASE clean 
install clean




-- 
Thanks,

Josh Paetzel


pgpj7zmCz5ni4.pgp
Description: PGP signature


Re: php 4.3.10, manual installation

2007-07-09 Thread Mikhail Goriachev
Zbigniew Szalbot wrote:
 Hi there,
 
 On Mon, 9 Jul 2007 16:54:16 -0500, Josh Paetzel [EMAIL PROTECTED] wrote:
 On Monday 09 July 2007, [EMAIL PROTECTED] wrote:
 Hello,

 I would take a look at cvsweb.freebsd.org and find out when PHP
 4.3.10 was in ports, then roll back your ports tree to that date
 with cvsup and install it from ports.

 So in this case the commit that updated the port to 4.3.11 was on
 Mon April 4 2005, so if you roll back the ports tree to April 1
 you'll be fine.

 You'll need cvsup for this.

 In your ports-supfile add the following line:

 *default date=2005.04.01.00.00.00

 If you have the current versions of gettext, libtool, m4, perl,
 and expat installed you can simply roll back the lang directory
 with cvsup, saving you from rolling back the entire tree by
 commenting out ports-all, and uncommenting ports-base and
 ports-lang

 Otherwise, if you want to install the versions of the
 dependancies that were current at the time of php 4.3.10 you'll
 want to roll back the entire tree.

 After you run cvsup you can just portinstall it or
 cd /usr/ports/lang/php4  make install clean
 All clear but when I go to install this particular version of PHP I
 am (rightly) warned about its multiple known vulnerabilities. I
 read man portinstall but don't think I have seen information how to
 temporarily switch this security check off when installing a port.

 Many thanks in advance!

 Zbigniew Szalbot

 make -DDISABLE_VULNERABILITIES install
 
 Thanks for your patience! However, when I try I get:
 
 make -DDISABLE_VULNERABILITIES install clean
 Dependency warning: used OpenSSL version contains known vulnerabilities
 Please update or define either WITH_OPENSSL_BASE or WITH_OPENSSL_PORT
 *** Error code 1
 
 Stop in /usr/ports/lang/php4.
 
 Now I did include WITH_OPENSSL_PORT=1 in pkgtools.conf for php4 but it does
 not seem to take any effect. I also tried inserting
 WITH_DISABLE_VULNERABILITIES=1 in this file but it did not help.


# make DISABLE_VULNERABILITIES=YES install clean

# man ports


Regards,
Mikhail.

-- 
Mikhail Goriachev
Webanoide

Telephone: +61 (0)3 62252501
Mobile Phone: +61 (0)4 38255158
E-Mail: [EMAIL PROTECTED]
Web: www.webanoide.org
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]