aboutsummaryrefslogtreecommitdiff
path: root/UPDATING
diff options
context:
space:
mode:
authorGuido Falsi <madpilot@FreeBSD.org>2015-05-04 14:32:15 +0000
committerGuido Falsi <madpilot@FreeBSD.org>2015-05-04 14:32:15 +0000
commitf0bc5e8dd977739512a5720670d392f66c962277 (patch)
treed489e2d27bf10c4970204d660a71a522205812c7 /UPDATING
parent1e1677cea1d354f25db00c670a4a0f0fce59f17d (diff)
downloadports-f0bc5e8dd977739512a5720670d392f66c962277.tar.gz
ports-f0bc5e8dd977739512a5720670d392f66c962277.zip
Notes
Diffstat (limited to 'UPDATING')
-rw-r--r--UPDATING24
1 files changed, 16 insertions, 8 deletions
diff --git a/UPDATING b/UPDATING
index 177c736463a5..4d2319ebb78e 100644
--- a/UPDATING
+++ b/UPDATING
@@ -124,17 +124,25 @@ AUTHOR: ohauer@FreeBSD.org
Due to conflicts between base OpenSSL and ports provided OpenSSL
library, which is required by net/libsrtp, the srtp support has
to be removed from the default asterisk13 port configuration,
- otherwise a a not working binary would be generated.
+ otherwise a not working binary would be generated.
- To get SRTP support working in the asterisk ports it is needed
- to build all other required ports with WITH_OPENSSL_PORT=yes. For
- asterisk13 it is also needed to enable the EXTSRTP option in the
- pjsip port.
+ To get SRTP support working in the asterisk ports make sure all
+ dependencies are linked against the same SSL library implementation
+ to avoid runtime conflicts. On 10.1 everything will work fine
+ unless ports SSL libraries are explicitly installed. On older OS
+ versions(10.0 and earlier) you will need to compile all ports
+ with WITH_OPENSSL_PORT=yes.
+
+ To get working SRTP support in asterisk13 with the pjsip backend
+ it is also needed to enable the EXTSRTP option in the pjsip port.
If the CURL option is enabled also make sure the ftp/curl port
- is using one of the HEIMDAL_PORT or KRB5_PORT options, otherwise
- the curl module will cause asterisk to fail on startup due to
- mixing calls to OpenSSL from base and from ports.
+ is using a GSSAPI implementation linking to the same SSL
+ implementation the other ports are using (BASE or NONE if you're
+ using base OpenSSL, GSSAPI_HEIMDAL GSSAPI_MIT otherwise). If an
+ incompatible option is being used the curl module will cause
+ asterisk to fail on startup due to mixing calls to OpenSSL from
+ base and from ports.
20150322:
AFFECTS: Users of security/openssh-portable