====== History ======

  * 22 January 2015 the %%OpenSSL%% project [[http://marc.info/?l=openssl-announce&m=142194517308956&w=2|releases OpenSSL 1.0.2]] as their next major version
  * 19 March 2014 %%OpenSSL%% [[http://marc.info/?l=openssl-announce&m=142677455915335&w=2|releases 1.0.2a]] fixing a large number of CVE's and some bugs
  * 21 March 2015 the [[http://svnweb.freebsd.org/ports?view=revision&revision=381789|OpenSSL port was updated]] from 1.0.1m to 1.0.2a, skipping 1.0.2

===== Using OpenSSL from ports =====

For your /etc/make.conf
%%%%''%%WITH_OPENSSL_PORT=YES%%''%%%%
will make all ports link ports %%OpenSSL%%. The ports not linking correctly are listed in [[OpenSSL/PortsLinkingBase|Ports linking base OpenSSL]] and have been discovered in [[https://bugs.freebsd.org/195796|PR195796]] the NO_SSL2 exp-build run. Beware that that list is no longer up-to-date, some have been fixed with the %%LibreSSL%% porting work.

====== Known issues ======

The primary change is bump of the shared library versions from .7 to .8

You will run into issues if you don't rebuild all ports linking to %%OpenSSL%%. Some ports will still have or have had issues where they rely on features in base that link against ports (notably, curl required base Kerberos which linked against base %%OpenSSL%% resulting in failures when building with ports %%OpenSSL%%). Please create an entry on this page and notify brnrd@ via mail or Barnerd on %%FreeNode%% or EFNet.

===== i386 NO_ASM =====
See [[https://bugs.freebsd.org/198788|PR198788]]

===== mail/postfix =====
See [[https://bugs.freebsd.org/198788|PR198788]]

===== Ports overlapping libssl from base and from ports =====
See [[https://bugs.freebsd.org/199265|PR199265]]

net-mgmt/ccnet
seafile-gui

segfaults, backtrace shows

<code>
#0  0x00000008022962e3 in ssl_create_cipher_list ()
   from /usr/local/lib/libssl.so.8
#1  0x000000080bd3fc3b in SSL_CTX_new () from /usr/lib/libssl.so.7
</code>

===== VirtualBox fails NS_ERROR_FACTORY_NOT_REGISTERED =====
Likely some %%OpenSSL%% fall-out

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=198952

===== mail/fetchmail "errors not reported properly" =====
Via #bsdports on EFnet