Johan van Selst wrote: > Dan Langille wrote: >> "This is to warn you that Bacula will probably not be able to be >> compiled and run with encryption on Release 7 of FreeBSD. This is >> because the version of pthreads in that release has pthread_t defined as >> a structure, which is incompatible with OpenSSL." > > The proper solution here would probably be for bacula to use the newer > CRYPTO_THREADID features of OpenSSL, which do not have this restriction. > The API is described at http://www.openssl.org/docs/crypto/threads.html > Unfortunately these are only available with a recent OpenSSL source - > and not with the version that is included in the FreeBSD 7 base system.
CRYPTO_THREADID is not in any released version of OpenSSL yet, even the current release 0.9.8k available now as the security/openssl port. That functionality is due with OpenSSL 1.0.0 which will be coming out Real Soon Now. I'm not sure what the plans are for the next FreeBSD 7.x or 8.x releases, but given OpenSSL 1.0.0 is available at the time I'd hope they could ship with that. Which simply means that on RELENG_7_{0,1,2} it will be obligatory to use OpenSSL from ports with Bacula versions after 3.0.0.[*] So you'ld just need something like this in the bacula-{client,server} Makefiles: .if ${OSVERSION} >= 700000 && ${OSVERSION} <= 702000 USE_OPENSSL_PORTS= yes .endif This assumes that the bacula project does make use of CRYPTO_THREADID, and hopefully can be persuaded not to make an incompatible change before the OpenSSL updates eventually do come out. Cheers, Matthew [*] What about supported FreeBSD 6.x versions? -- Dr Matthew J Seaman MA, D.Phil. Flat 3 7 Priory Courtyard PGP: http://www.infracaninophile.co.uk/pgpkey Ramsgate Kent, CT11 9PW, UK
signature.asc
Description: OpenPGP digital signature