Re: openssl in base should install c_rehash

On 02/08/2018 15:15, Ulrich Spörlein wrote:
> 
> 2018-02-08 21:00 GMT+01:00 Jung-uk Kim <jkim_at_freebsd.org
> <mailto:jkim_at_freebsd.org>>:
> 
>     On 02/08/2018 08:52, Jan Bramkamp wrote:
>     > On 08.02.18 14:24, Ulrich Spörlein wrote:
>     >> Hey,
>     >>
>     >> c_rehash has somehow disappeared from the base system. We still
>     >> install the
>     >> manpage it seems, but the tool itself is missing. Can we have that back?
>     >>
>     >>
>     >> root_at_acme:/etc/ssl# locate c_rehash
>     >> ...
>     >> /usr/share/openssl/man/man1/c_rehash.1.gz
>     >> /usr/src/crypto/openssl/doc/apps/c_rehash.pod
>     >> /usr/src/secure/usr.bin/openssl/man/c_rehash.1
>     >>
>     >>
>     >> The port seems to install it just fine:
>     >>
>     >> root_at_acme:/etc/ssl# grep -r c_rehash /usr/ports/
>     >> /usr/ports/security/openssl/pkg-plist:bin/c_rehash
>     >> /usr/ports/security/openssl/pkg-plist:man/man1/c_rehash.1.gz
>     >>
>     >> It looks like the merge of OpenSSL 1.0.1c got rid of it (if I'm
>     >> reading the
>     >> history with git pickaxe right).
>     >
>     > The LibreSSL port lacks a c_rehash script as well. Putting c_rehash back
>     > into base wouldn't solve the problem because it requires Perl 5.
> 
>     Correct.  I just removed the manual page to not confuse users.
> 
>     https://svnweb.freebsd.org/changeset/base/329024
>     <https://svnweb.freebsd.org/changeset/base/329024>
> 
>     Thanks for letting me know!
> 
>     Jung-uk Kim
> 
> 
> I would rather that c_rehash is brought back. I can install perl just
> fine (or have it anyway installed), that's not the case with openssl
> from ports, as that will mess up many things.

Although c_rehash was available from src/crypto/openssl/tools, we have
never installed it in the base, AFAIK.  Actually, it does not use proper
perl binary (i.e., /usr/bin/perl vs. /usr/local/bin/perl) and certs
directory (i.e., /usr/local/ssl/certs vs. /etc/ssl/certs).

https://svnweb.freebsd.org/base/vendor-crypto/openssl/dist-0.9.8/tools/c_rehash?revision=247942&view=co

Jung-uk Kim

> Guess I'll download my own version ... :(