Bug 202990

Summary:	exp-build with WITH_OPENSSL_PORT=yes no-ssl2/no-ssl3
Product:	Ports & Packages	Reporter:	Bernard Spil <brnrd>
Component:	Ports Framework	Assignee:	Port Management Team <portmgr>
Status:	Closed Not Accepted
Severity:	Affects Only Me	CC:	ports-bugs
Priority:	---
Version:	Latest
Hardware:	Any
OS:	Any

Description Bernard Spil freebsd_committer

2015-09-09 12:52:20 UTC

I'd like to request an exp-build with ports' SSL built without support for either SSLv2/SSLv3. Either WITH_OPENSSL_PORT=yes and security_openssl_UNSET+= SSL2 SSL3 or a build with LibreSSL 2.3 from https://reviews.freebsd.org/D3585
 (my personal preference being the LibreSSL build as that has really _removed_ the SSLv3_ methods and structures).

Purpose is to detect what ports require patching to build/run without SSLv3 and yes I'm volunteering to fix/patch these ports and upstream the result.

I know that this has been requested before (https://bugs.freebsd.org/195796) but that was _before_ POODLE happened. Currently everyone has (or should) disable SSLv3 completely.

I have a patched Apache lying around (would help with the # packages that will build).

Comment 1 Antoine Brodin freebsd_committer

2015-09-09 12:54:57 UTC

I won't do the exp-run myself,  there's too much problems with mix of base/ports openssl for now.

Comment 2 Antoine Brodin freebsd_committer

2015-09-09 13:00:48 UTC

Reject,  for such an exp-run to detect the problems in the ports tree it has to be done with an src patch.