getting rid of openssl port

2003-08-04 Thread Toomas Aas
Hello!

Some of my machines were running RELENG_4_7 when I installed ports 
such as apache13_modssl and cyrus-imapd on them. Since that version
of FreeBSD had OpenSSL 0.9.6 in the base system and these ports required
0.9.7, I ended up with openssl port installed on these systems.

Now that I'm upgrading to RELENG_4_8, which includes OpenSSL 0.9.7, I want to
get rid of the port. It would just feel cleaner to not have multiple versions 
of same libraries in /usr/lib and /usr/local/lib.

What is the easiest way to get rid of OpenSSL port? Do I need to remove everything
that depends on openssl port, remove the port and then reinstall everything?
Or is there a less painful way? Actually everything is not that much in my case,
it really is just apache13-modssl port on one machine and cyrus-imapd port on the
other machine, but it still implies *some* downtime of HTTPD and IMAP server. 
--
Toomas Aas | [EMAIL PROTECTED] | http://www.raad.tartu.ee/~toomas/
* What Happens if I. PPPSSS, sorry!

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: getting rid of openssl port

2003-08-04 Thread Johan De Messemaeker
On Monday 04 August 2003 13:48, Toomas Aas wrote:
 Hello!

 What is the easiest way to get rid of OpenSSL port? Do I need to remove
 everything that depends on openssl port, remove the port and then reinstall
 everything? Or is there a less painful way? Actually everything is not
 that much in my case, it really is just apache13-modssl port on one machine
 and cyrus-imapd port on the other machine, but it still implies *some*
 downtime of HTTPD and IMAP server. --

Use portupgrade (/usr/ports/sysutils/portupgrade). Nice and easy.

Regards, Johan

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: getting rid of openssl port

2003-08-04 Thread Matthew Seaman
On Mon, Aug 04, 2003 at 02:48:38PM +0300, Toomas Aas wrote:
 Hello!
 
 Some of my machines were running RELENG_4_7 when I installed ports 
 such as apache13_modssl and cyrus-imapd on them. Since that version
 of FreeBSD had OpenSSL 0.9.6 in the base system and these ports required
 0.9.7, I ended up with openssl port installed on these systems.
 
 Now that I'm upgrading to RELENG_4_8, which includes OpenSSL 0.9.7, I want to
 get rid of the port. It would just feel cleaner to not have multiple versions 
 of same libraries in /usr/lib and /usr/local/lib.
 
 What is the easiest way to get rid of OpenSSL port? Do I need to remove everything
 that depends on openssl port, remove the port and then reinstall everything?
 Or is there a less painful way? Actually everything is not that much in my case,
 it really is just apache13-modssl port on one machine and cyrus-imapd port on the
 other machine, but it still implies *some* downtime of HTTPD and IMAP server. 

So long as you define WITH_OPENSSL_BASE=yes in your environment, both
the apache13-modssl and cyrus-imapd ports will link against the system
supplied version of the SSL libraries.

Thus you can use portupgrade to update those ports with minimal
downtime, and then delete the openssl port you've installed afterwards
without any unpleasant side effects from those two.  Not that it
wouldn't be sensible to use ldd(1) to double check which SSL libraries
the binaries in question link against before you start hitting the
delete key.

Cheers,

Matthew



-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgp0.pgp
Description: PGP signature


Re: getting rid of openssl port

2003-08-04 Thread Markie
- Original Message -
From: Johan De Messemaeker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, August 04, 2003 1:44 PM
Subject: Re: getting rid of openssl port


 On Monday 04 August 2003 13:48, Toomas Aas wrote:
  Hello!
 
  What is the easiest way to get rid of OpenSSL port? Do I need to remove
  everything that depends on openssl port, remove the port and then
reinstall
  everything? Or is there a less painful way? Actually everything is not
  that much in my case, it really is just apache13-modssl port on one
machine
  and cyrus-imapd port on the other machine, but it still implies *some*
  downtime of HTTPD and IMAP server. --

 Use portupgrade (/usr/ports/sysutils/portupgrade). Nice and easy.

 Regards, Johan


Hi Johan,

Another option is to define OPENSSL_OVERWRITE_BASE when building the openssl
port, this will install the port version where the base system openssl would
usually be. If not using portupgrade you would do something like
make -DOPENSSL_OVERWRITE_BASE, if using portupgrade you have two options:
portinstall -m '-DOPENSSL_OVERWRITE_BASE' openssl or you can edit the
MAKE_ARGS variable in /usr/local/etc/pkgtools.conf so it reads something
like

MAKE_ARGS = {
'security/openssl' = '-DOPENSSL_OVERWRITE_BASE',
'misc/some-other-port' = '-DMAKE_ARGUMENTS'
}

and then just run portinstall openssl (or portupgrade) and it'll
automagically add the flags. This is what I do with OpenSSH and OpenSSL.

Just an idea :p
Markie

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: getting rid of openssl port

2003-08-04 Thread Johan De Messemaeker
On Monday 04 August 2003 16:00, Markie wrote:

snip explanation

 Just an idea :p

And a very interesting one :-) 

Regards, Johan

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]