Jung-uk Kim <j...@freebsd.org> wrote in <8e60a869-fe1e-9314-ffdc-76ed3e2dc...@freebsd.org>:
jk> > I merely try to understand how to unbreak upgrade path for 11.2-STABLE
workstations
jk> > with stock sendmail and SSL support that also has many ports installed
including
jk> > ports requiring new openssl API. Because buildworld fails and upgrade is
broken.
jk> I am also trying to understand your problem. Which port is specifically
jk> requiring new OpenSSL API for you?
The problem eugen@ is trying to explain is (correct me if this is
wrong):
1. One needs to install OpenSSL from ports if she wants to install
software which depends on it. deskutils/nextcloudclient, for
example. Setting DEFAILT_VERSION+=ssl=openssl is strongly
recommended in this case for consistency.
2. Handbook says enabling SMTP AUTH requires the following in make.conf:
SENDMAIL_CFLAGS=-I/usr/local/include/sasl -DSASL
SENDMAIL_LDFLAGS=-L/usr/local/lib
SENDMAIL_LDADD=-lsasl2
However, this variables make the buildworld target to pick up
OpenSSL from ports if installed, not from base, in the middle of
building sendmail. "make buildworld" will always fail. There is
no way to avoid OpenSSL from ports if she wants software such as
deskutils/nextcloudclient.
This build breakage occurs with sendmail + openssl from ports, not
related to cyrus-sasl2. A shlib mismatch between sendmail and
cyrus-sasl2 in terms of OpenSSL library is another issue.
I think there are several workaround, but the primary problem is that
people can get confused with instructions in the handbook. I suggest
to update the handbook:
a) If you do not have security/openssl on your system, set the
following in make.conf and rebuilt the world:
SENDMAIL_CFLAGS=-I/usr/local/include/sasl -DSASL
SENDMAIL_LDFLAGS=-L/usr/local/lib
SENDMAIL_LDADD=-lsasl2
b) If you have security/openssl, sendmail in the base system does not
support SMTP AUTH because of incompatibility with the newer
versions of OpenSSL. Use mail/sendmail from ports.
I still feel that b) is sub-optimal, but it would be too complex to
make them coexist with each other. The attached patch and putting
SASLBASEDIR=/usr/local into /etc/make.conf instead of the SENDMAIL_*
variables should mitigate the first problem but if
security/cyrus-sasl2 was built with OpenSSL from ports, the shlib
mismatch still occurs.
-- Hiroki
Index: usr.sbin/sendmail/Makefile
===================================================================
--- usr.sbin/sendmail/Makefile (revision 358301)
+++ usr.sbin/sendmail/Makefile (working copy)
@@ -72,3 +72,15 @@
ln -sf ${.ALLSRC} ${.TARGET}
.include <bsd.prog.mk>
+
+# libsasl2 support
+.if defined(SASLBASEDIR) && exists(${SASLBASEDIR})
+${OBJS}: libsasl2.so sasl
+libsasl2.so:
+ ln -s -f ${SASLBASEDIR}/lib/libsasl2.so ${.OBJDIR}
+sasl:
+ ln -s -f ${SASLBASEDIR}/include/sasl ${.OBJDIR}
+CLEANFILES+=libsasl2.so sasl
+LDADD+= -lsasl2 -L.
+CFLAGS+= -I. -DSASL
+.endif
pgpTKjfr1JDk5.pgp
Description: PGP signature
