[MacPorts] #46596: openssl @1.0.1k breaks certificate signature verification

[MacPorts]

#46596: openssl @1.0.1k breaks certificate signature verification
----------------------+-------------------
  Reporter:  uri@…    |      Owner:  mww@…
      Type:  defect   |     Status:  new
  Priority:  High     |  Milestone:
 Component:  ports    |    Version:  2.3.3
Resolution:           |   Keywords:
      Port:  openssl  |
----------------------+-------------------

Comment (by cal@…):

 Replying to [comment:10 uri@…]:
 > Since I have GMP port installed, I decided to add GMP dependency to my
 openssl. So I added "port:gmp" to "depends_lib". However the build did not
 seem to pick the gmp library ("port upgrade" would fail) until I
 explicitly added "-lgmp" to "configure.args". That sounds wrong?

 No, that sounds exactly right. If adding the dependency was all it took to
 make openssl link against gmp, all users who built from source and have
 gmp installed would end up with openssl linked against it, but the
 dependency relation was not necessary picked up by MacPorts. This would
 lead to incorrect dependency information, breakage when later uninstalling
 gmp and non-reproducible builds (because they depend on your selection of
 ports), which we try to avoid at all cost.

-- 
Ticket URL: <https://trac.macports.org/ticket/46596#comment:11>
MacPorts <https://www.macports.org/>
Ports system for OS X