[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

            Bug ID: 222271
           Summary: lang/mono: build with TLS1.2 support as default using
                    BoringSSL
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: [hidden email]
          Reporter: [hidden email]
          Assignee: [hidden email]
             Flags: maintainer-feedback?([hidden email])

Hello,

Would it be possible to get the default pkg build of mono to contain TLS1.2
support?


Following this link: http://www.codenicer.com/content/mono-481-tls-12-freebsd
is a description on how to patch the ports files. (i am not the author - blog
is credited Ivan Radovanovic).


i have manually been patching the files in my ports tree and build them, which
works fine - but it feels weird that TLS1.2 is not supported out of the box,
and add additional steps for deployment.




Rgs
Egil Hasting

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

maintainer-feedback requested: [Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
Egil Hasting <[hidden email]> has reassigned Bugzilla Automation
<[hidden email]>'s request for maintainer-feedback to [hidden email]:
Bug 222271: lang/mono: build with TLS1.2 support as default using BoringSSL
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271



--- Description ---
Hello,

Would it be possible to get the default pkg build of mono to contain TLS1.2
support?


Following this link: http://www.codenicer.com/content/mono-481-tls-12-freebsd
is a description on how to patch the ports files. (i am not the author - blog
is credited Ivan Radovanovic).


i have manually been patching the files in my ports tree and build them, which
works fine - but it feels weird that TLS1.2 is not supported out of the box,
and add additional steps for deployment.




Rgs
Egil Hasting
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

--- Comment #1 from [hidden email] ---
Is there any progress on this? The lack of TLS 1.2 means that basically every
.NET-based program interacting with Github no longer works properly.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

[hidden email] changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]

--- Comment #2 from [hidden email] ---
+1 for this - my FreeNAS iocage jails are difficult to autoupdate (mono apps to
github). Help!

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

[hidden email] changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]

--- Comment #3 from [hidden email] ---
yes, please progress on this. GitHub is TLS 1.2 only now, which breaks a few
apps that require mono.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

Daniel Porsch <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]

--- Comment #4 from Daniel Porsch <[hidden email]> ---
+1! This would be great!

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

Mark Felder <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[hidden email]

--- Comment #5 from Mark Felder <[hidden email]> ---
Please look at my new review for a modern Mono

https://reviews.freebsd.org/D15780


Testing appreciated!

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

--- Comment #6 from [hidden email] ---
A commit references this bug:

Author: feld
Date: Sat Jun 16 15:56:44 UTC 2018
New revision: 472555
URL: https://svnweb.freebsd.org/changeset/ports/472555

Log:
  Update Mono to 5.10.1.47

  This brings a more modern Mono release to the ports tree. After
  discussions with others in the Mono community I targeted the mono
  5.10.1.47 release which is the latest release in the "Visual Studio"
  release channel. This is considered to be the most stable and widely
  tested, which makes it a good candidate for us. We may upgrade to 5.12
  after additional testing or introduce another Mono package for users who
  require testing against a newer release; this has yet to be determined.

  - Build from official release tarballs
  - Now include BoringSSL per upstream guidelines [1]
  - Remove ACCEPTANCE_TESTS, not being updated by upstream
  - No long require glib; Mono includes their own replacement
  - USES=display:tests required for some tests
  - Remove broken for armv6, armv7: file now available [2]
  - Mark as LLD safe as mono changed how it handles TLS [3]

  Changelog:    http://www.mono-project.com/docs/about-mono/releases/5.10.0/

  PR:           222271 [1]
  PR:           221236 [2]
  PR:           218885 [3]
  PR:           211367
  Approved by:  dbn
  Differential Revision:        https://reviews.freebsd.org/D15780

Changes:
  head/lang/mono/Makefile
  head/lang/mono/distinfo
  head/lang/mono/files/patch-configure.ac
  head/lang/mono/files/patch-eglib_src_gfile-posix.c
_U
head/lang/mono/files/patch-mcs_class_Mono.Security_Mono.Security.Cryptography_KeyPairPersistence.cs
_U
head/lang/mono/files/patch-mcs_class_Mono.Security_Mono.Security.X509_X509StoreManager.cs
_U
head/lang/mono/files/patch-mcs_tools_mono-configuration-crypto_lib_Mono.Configuration.Crypto_KeyContainerCollection.cs
_U
head/lang/mono/files/patch-mcs_tools_xbuild_data_12.0_Microsoft.CSharp.targets
_U
head/lang/mono/files/patch-mcs_tools_xbuild_data_14.0_Microsoft.CSharp.targets
  head/lang/mono/files/patch-mono_eglib_gfile-posix.c
  head/lang/mono/files/patch-mono_mini_Makefile.am.in
  head/lang/mono/files/patch-mono_mini_mini-posix.c
  head/lang/mono/files/patch-mono_mini_tramp-amd64.c
  head/lang/mono/files/patch-mono_profiler_ptestrunner.pl
  head/lang/mono/files/patch-mono_utils_mono-context.h
  head/lang/mono/files/patch-mono_utils_mono-proclib.c
  head/lang/mono/files/patch-mono_utils_mono-threads.c
  head/lang/mono/files/patch-scripts_mono-heapviz
  head/lang/mono/pkg-plist
  head/lang/mono-basic/Makefile
  head/lang/mono-basic/distinfo
  head/lang/mono-basic/files/patch-configure
  head/x11-toolkits/gtk-sharp30/Makefile
  head/x11-toolkits/gtk-sharp30/files/
 
head/x11-toolkits/gtk-sharp30/files/patch-gtk_gui-thread-check_profiler_gui-thread-check.c

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

Conrad Meyer <[hidden email]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|New                         |Closed
         Resolution|---                         |FIXED
                 CC|                            |[hidden email]

--- Comment #7 from Conrad Meyer <[hidden email]> ---
Hi feld@, can this one be marked closed as fixed by the 5.10 update?
Tentatively marking closed, please reopen if I misunderstood.

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"
Reply | Threaded
Open this post in threaded view
|

[Bug 222271] lang/mono: build with TLS1.2 support as default using BoringSSL

bugzilla-noreply
In reply to this post by bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222271

[hidden email] changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |sontiges.freebsd@oliver.4of
                   |                            |.de

--- Comment #8 from [hidden email] ---
The actual mono binary mono-5.10.1.57_2 installed by pkg on FreeBSD 12.1 (same
version in quaterly and latest) does not come with TLS 1.2 support!

--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
[hidden email] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-mono
To unsubscribe, send any mail to "[hidden email]"