I've set system wide USE enabling "libressl" and disabling "-openssl" world update stops for net-misc/iputils with the following error: !!! The ebuild selected to satisfy "net-misc/iputils" has unmet requirements. - net-misc/iputils-20150815-r1::gentoo USE="ipv6 libressl (policykit) ssl -SECURITY_HAZARD -arping -caps -clockdiff -doc -filecaps -gcrypt -idn -nettle -openssl -rarpd -rdisc -static -tftpd -tracepath -traceroute" ABI_X86="64" The following REQUIRED_USE flag constraints are unsatisfied: ipv6? ( ssl? ( exactly-one-of ( gcrypt nettle openssl ) ) ) Reproducible: Always Steps to Reproduce: 1. set USE="-openssl libressl" 2. emerge -1pv net-misc/iputils 3. Actual Results: build with "libressl" fails before even beginning Expected Results: correctly use libressl USE flag
Given the way the DEPEND is currently written, you need to enable both the openssl and libressl USE flags to build iputils against libressl. I assume this is intentional, but I will let Julian confirm.
yes, openssl and libressl are NOT conflicting USE flags I've expected this to hit us. openssl is a terribly named flag.
so, a few years have gone by and: - the depends containing openssl have reference to the ssl flags of other packages in the same line as the openssl flag reference in the 20160308 & 20171016 - both 20160308 & 20171016 are masked packages, at least under stable funtoo kits - the 2012 stable ebuild is one of 3 packages hard referencing openssl specifically during an @world after uninstalling openssl & setting libressl. This is triggering a big sookie wah wah about "cannot co-exist on the same system" In the longer term, using USE flags named after packages that cannot coexist for any purpose other than to express which you want can be as 'correct' as it pleases. It will still be a profound wrongness. Within my 'world' this is the only package that appears to be interpreting the openssl flag in this way. In the short term, amending the stable LIB_DEPEND to: LIB_DEPEND="caps? ( sys-libs/libcap[static-libs(+)] ) >---idn? ( net-dns/libidn[static-libs(+)] ) >---ipv6? ( ssl? ( >--->---gnutls? ( net-libs/gnutls[static-libs(+)] ) >--->---!gnutls? ( || ( dev-libs/openssl:0 dev-libs/libressl:0 ) ) >---) )" seems to have cleared my immediate blockage problem.
(In reply to Erik from comment #3) > [...] > > In the short term, amending the stable LIB_DEPEND to: > > LIB_DEPEND="caps? ( sys-libs/libcap[static-libs(+)] ) > >---idn? ( net-dns/libidn[static-libs(+)] ) > >---ipv6? ( ssl? ( > >--->---gnutls? ( net-libs/gnutls[static-libs(+)] ) > >--->---!gnutls? ( || ( dev-libs/openssl:0 dev-libs/libressl:0 ) ) > >---) )" > > seems to have cleared my immediate blockage problem. ...which is completely wrong from Gentoo P.O.V.
