{"action":"created","issue":{"url":"https://api.github.com/repos/libressl-portable/portable/issues/95","labels_url":"https://api.github.com/repos/libressl-portable/portable/issues/95/labels{/name}","comments_url":"https://api.github.com/repos/libressl-portable/portable/issues/95/comments","events_url":"https://api.github.com/repos/libressl-portable/portable/issues/95/events","html_url":"https://github.com/libressl-portable/portable/issues/95","id":86893481,"number":95,"title":"Location (default) of openssl.cnf on OSX 10.10.x","user":{"login":"danielshaw","id":991914,"avatar_url":"https://avatars.githubusercontent.com/u/991914?v=3","gravatar_id":"","url":"https://api.github.com/users/danielshaw","html_url":"https://github.com/danielshaw","followers_url":"https://api.github.com/users/danielshaw/followers","following_url":"https://api.github.com/users/danielshaw/following{/other_user}","gists_url":"https://api.github.com/users/danielshaw/gists{/gist_id}","starred_url":"https://api.github.com/users/danielshaw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/danielshaw/subscriptions","organizations_url":"https://api.github.com/users/danielshaw/orgs","repos_url":"https://api.github.com/users/danielshaw/repos","events_url":"https://api.github.com/users/danielshaw/events{/privacy}","received_events_url":"https://api.github.com/users/danielshaw/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-06-10T08:50:59Z","updated_at":"2015-07-13T04:26:08Z","closed_at":null,"body":"Successfully compiled latest from Github on OSX 10.10.3:\r\n\r\n$ /usr/local/bin/openssl version\r\nWARNING: can't open config file: /etc/ssl/openssl.cnf\r\nLibreSSL 2.2.0\r\n\r\nAs above, version is 2.2.0, but note the warning. It's defaulting to look for an openssl.cnf in /etc/ssl/ - My guess is that this is a fallback default from other *nix systems.\r\n\r\nHowever, on my Yosemite install: $PATH makes openssl from MacPorts the default for terminal:\r\n$ /opt/local/bin/openssl version\r\nOpenSSL 1.0.2a 19 Mar 2015\r\n\r\nThis version has it's .cnf at:\r\n /opt/local/etc/openssl/openssl.cnf\r\n\r\nThe original OSX version is also of course still there:\r\n$ /usr/bin/openssl version\r\nOpenSSL 0.9.8zd 8 Jan 2015\r\n\r\nBut this version has it's config file here:\r\n/System/Library/OpenSSL/openssl.cnf\r\n\r\nSo, therefore, in order of preference/importance, installation on OSX should, in my opinion:\r\n1. If OSX is detected, make the fall-back default as /System/Library/OpenSSL/openssl.cnf\r\n2. Nice to have would be to have ./configure logic to look for MacPorts / Brew installed versions in common locations /opt/local and /usr/local \r\n3. Possibly warn also during configure/build if no .cnf is found in expected or default locations, and allow a --openssl-etc= (or similar) option to ./configure so that it can be specified manually.\r\n\r\nFinally, with a view to LibreSSL being a 100% drop-in replacement with no dependence on a pre-existing OpenSSL being there already: Why not, if no existing openssl.cnf is found, install a default one into /$prefix/etc/ssl/ ?\r\n\r\n\r\n\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/libressl-portable/portable/issues/comments/120807790","html_url":"https://github.com/libressl-portable/portable/issues/95#issuecomment-120807790","issue_url":"https://api.github.com/repos/libressl-portable/portable/issues/95","id":120807790,"user":{"login":"busterb","id":4108654,"avatar_url":"https://avatars.githubusercontent.com/u/4108654?v=3","gravatar_id":"","url":"https://api.github.com/users/busterb","html_url":"https://github.com/busterb","followers_url":"https://api.github.com/users/busterb/followers","following_url":"https://api.github.com/users/busterb/following{/other_user}","gists_url":"https://api.github.com/users/busterb/gists{/gist_id}","starred_url":"https://api.github.com/users/busterb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/busterb/subscriptions","organizations_url":"https://api.github.com/users/busterb/orgs","repos_url":"https://api.github.com/users/busterb/repos","events_url":"https://api.github.com/users/busterb/events{/privacy}","received_events_url":"https://api.github.com/users/busterb/received_events","type":"User","site_admin":false},"created_at":"2015-07-13T04:26:07Z","updated_at":"2015-07-13T04:26:07Z","body":"#107 is now landed - can you let me know if that is a sufficient fix for this?"}}