1. Prepare: upgrade src tree and ports tree
Recommand to use svnlite
The first time to run svnlite:
svnlite co https://svn.freebsd.org/base/head /usr/src svnlite co https://svn.freebsd.org/ports/head /usr/ports
Then you type Ctrl + C to interrupt it and run scripts:
filename: update-src.mksh#!/bin/mksh while true; do svnlite cleanup /usr/src svnlite up /usr/src if [ $? -eq 0 ]; then break fi done
filename: update-ports.mksh#!/bin/mksh while true; do svnlite cleanup /usr/ports svnlite up /usr/ports if [ $? -eq 0 ]; then break fi done
2. Rebuild FreeBSD and upgrade the Base System.
3. mergemaster tips
4. Then your system will be having OpenSSL 1.1.1 and support TLS v1.3
openssl version -a
5. If you run freebsd software with errors such as "libssl.so.9 not found", "libcrypto.so.9 not found"
This is because some applications still rely on old OpenSSL runtime.
• * temporary solution: make symbolic links to those files.
cd /usr/lib ln -s libssl.so libssl.so.9 ln -s libcrypto.so libcrypto.so.9
• * after pkg upgrade, only a few apps rely on the old OpenSSL runtime, so you only need to rebuild those apps with ports (Take fossil for an example).
pkg update -f pkg upgrade cd /usr/ports/devel/fossil make make deinstall make install clean