Bug 273869 - security/libressl: package installation failure: /usr/local/etc/ssl/certs is a directory
Summary: security/libressl: package installation failure: /usr/local/etc/ssl/certs is ...
Status: Open
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Some People
Assignee: Bernard Spil
URL: https://www.freshports.org/security/l...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-09-16 23:21 UTC by Ivan Rozhuk
Modified: 2024-07-14 14:56 UTC (History)
5 users (show)

See Also:
bugzilla: maintainer-feedback? (brnrd)


Attachments
patch (3.99 KB, patch)
2023-09-22 10:03 UTC, Tijl Coosemans
no flags Details | Diff
revert to not touch /usr/local/etc/ssl (2.39 KB, patch)
2024-03-27 09:31 UTC, Ivan Rozhuk
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Ivan Rozhuk 2023-09-16 23:21:17 UTC
===>  Installing for libressl-3.7.3_1
===>  Checking if libressl is already installed
===>   Registering installation for libressl-3.7.3_1
Installing libressl-3.7.3_1...
pkg-static: Fail to rename /usr/local/etc/ssl/.pkgtemp.certs.zMeSE7GtfK9S -> /usr/local/etc/ssl/certs:Is a directory
Comment 1 Ivan Rozhuk 2023-09-16 23:32:43 UTC
rm -rf /usr/local/etc/ssl/certs
fix installation for me
Comment 2 Graham Perrin 2023-09-17 04:18:59 UTC
% pkg provides /usr/local/etc/ssl/certs
% uname -KU ; file /usr/local/etc/ssl/certs
1500000 1500000
/usr/local/etc/ssl/certs: cannot open `/usr/local/etc/ssl/certs' (No such file or directory)
%
Comment 3 Bernard Spil freebsd_committer freebsd_triage 2023-09-19 08:57:33 UTC
(In reply to Ivan Rozhuk from comment #1)

Thanks for reporting, didn't think about this failure mode.

I believe that in the upgrade, the original certs dir is not removed and therefor the symlink cannot be created :'(
Comment 4 Ivan Rozhuk 2023-09-19 09:07:31 UTC
(In reply to Bernard Spil from comment #3)

Yes, I keep few certs in this dir.
I just move it to /etc/..., but probably other users must be notified about requiring manual action.
Comment 5 Ivan Rozhuk 2023-09-21 13:39:20 UTC
Another error:
[202/223] Extracting libressl-libtls-3.7.3_1:  85%
pkg: Symlink /usr/local/etc/ssl/certs not specified in the manifest

libtls have no deal with certs, this build based on OpenSSL.
Comment 6 Tijl Coosemans freebsd_committer freebsd_triage 2023-09-22 10:03:33 UTC
Created attachment 245111 [details]
patch

This should fix the installation if etc/ssl/certs still exists as a directory.
Comment 7 Ivan Rozhuk 2024-03-27 09:31:18 UTC
Created attachment 249507 [details]
revert to not touch /usr/local/etc/ssl

I check OpenSSL and other ports - they do not modify /usr/local/etc/ssl.
Probably better to not do anything with "etc" dir since this is user responsibility.
Comment 8 commit-hook freebsd_committer freebsd_triage 2024-03-31 13:08:41 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=36dad620780f4b8b5c523c05c57b1c82dbd42202

commit 36dad620780f4b8b5c523c05c57b1c82dbd42202
Author:     Bernard Spil <brnrd@FreeBSD.org>
AuthorDate: 2024-03-31 13:04:52 +0000
Commit:     Bernard Spil <brnrd@FreeBSD.org>
CommitDate: 2024-03-31 13:04:52 +0000

    security/openssl: Fix for POSIX_VERSION 200809L

     * See https://github.com/openssl/openssl/pull/23885

    PR:             273869
    Reported by:    imp
    Submitted by:   vvd

 security/openssl-quictls/Makefile                  |  4 ++-
 security/openssl/Makefile                          |  2 +-
 .../patch-crypto_async_arch_async__posix.h (new)   | 32 ++++++++++++++++++++++
 security/openssl111/Makefile                       |  4 ++-
 security/openssl31-quictls/Makefile                |  3 ++
 security/openssl31/Makefile                        |  4 ++-
 security/openssl32/Makefile                        |  4 ++-
 7 files changed, 48 insertions(+), 5 deletions(-)
Comment 9 commit-hook freebsd_committer freebsd_triage 2024-03-31 13:22:43 UTC
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=c7aaa5fe96fce5e4bfa086bda1d876ab198e979a

commit c7aaa5fe96fce5e4bfa086bda1d876ab198e979a
Author:     Bernard Spil <brnrd@FreeBSD.org>
AuthorDate: 2024-03-31 13:20:48 +0000
Commit:     Bernard Spil <brnrd@FreeBSD.org>
CommitDate: 2024-03-31 13:20:48 +0000

    security/openssl33: Update to 3.3.0.b1

     * Bump from ALPHA to BETA
     * Fix for POSIX_VERSION 200809L [1]

    PR:             273869 [1]
    Reported by:    imp [1]
    Submitted by:   vvd [1]

 security/openssl33/Makefile    | 4 +++-
 security/openssl33/distinfo    | 6 +++---
 security/openssl33/pkg-message | 4 ++--
 3 files changed, 8 insertions(+), 6 deletions(-)
Comment 10 Vedran Miletic 2024-07-14 14:35:04 UTC
Is this now fixed? (Bug 275676 still remains, but that's a separate issue.)
Comment 11 Ivan Rozhuk 2024-07-14 14:56:40 UTC
(In reply to Vedran Miletic from comment #10)
No.
I use local patch that revert commit and only create dir if not exist.

I do not agree with path logic by Tijl: if you want to switch to /etc/ssl - change it in code, not by creating symlink in mine /etc folders.