diff options
author | Guido Falsi <madpilot@FreeBSD.org> | 2015-05-04 14:32:15 +0000 |
---|---|---|
committer | Guido Falsi <madpilot@FreeBSD.org> | 2015-05-04 14:32:15 +0000 |
commit | f0bc5e8dd977739512a5720670d392f66c962277 (patch) | |
tree | d489e2d27bf10c4970204d660a71a522205812c7 /UPDATING | |
parent | 1e1677cea1d354f25db00c670a4a0f0fce59f17d (diff) | |
download | ports-f0bc5e8dd977739512a5720670d392f66c962277.tar.gz ports-f0bc5e8dd977739512a5720670d392f66c962277.zip |
Notes
Diffstat (limited to 'UPDATING')
-rw-r--r-- | UPDATING | 24 |
1 files changed, 16 insertions, 8 deletions
@@ -124,17 +124,25 @@ AUTHOR: ohauer@FreeBSD.org Due to conflicts between base OpenSSL and ports provided OpenSSL library, which is required by net/libsrtp, the srtp support has to be removed from the default asterisk13 port configuration, - otherwise a a not working binary would be generated. + otherwise a not working binary would be generated. - To get SRTP support working in the asterisk ports it is needed - to build all other required ports with WITH_OPENSSL_PORT=yes. For - asterisk13 it is also needed to enable the EXTSRTP option in the - pjsip port. + To get SRTP support working in the asterisk ports make sure all + dependencies are linked against the same SSL library implementation + to avoid runtime conflicts. On 10.1 everything will work fine + unless ports SSL libraries are explicitly installed. On older OS + versions(10.0 and earlier) you will need to compile all ports + with WITH_OPENSSL_PORT=yes. + + To get working SRTP support in asterisk13 with the pjsip backend + it is also needed to enable the EXTSRTP option in the pjsip port. If the CURL option is enabled also make sure the ftp/curl port - is using one of the HEIMDAL_PORT or KRB5_PORT options, otherwise - the curl module will cause asterisk to fail on startup due to - mixing calls to OpenSSL from base and from ports. + is using a GSSAPI implementation linking to the same SSL + implementation the other ports are using (BASE or NONE if you're + using base OpenSSL, GSSAPI_HEIMDAL GSSAPI_MIT otherwise). If an + incompatible option is being used the curl module will cause + asterisk to fail on startup due to mixing calls to OpenSSL from + base and from ports. 20150322: AFFECTS: Users of security/openssh-portable |