[bug-notifications] [openssl 0004931]: "git clone https: ..." fails: Request to upgrade OpenSSL to 1.0.0h or newer.

[Mantis Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=4931 
====================================================================== 
Reported By:                zephyrus00jp
Assigned To:                
====================================================================== 
Project:                    openssl
Issue ID:                   4931
Category:                   upgrade
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     new
====================================================================== 
Date Submitted:             2012-04-02 15:50 CEST
Last Modified:              2012-04-04 16:36 CEST
====================================================================== 
Summary:                    "git clone https: ..." fails: Request to upgrade
OpenSSL to 1.0.0h or newer.
Description: 
On solaris 10, I found that

git clone https:....

failed.

To make a long story short, I tracked down this to the failure of curl
library used by git, and then this curl library seems to be failing
in openssl modules.

The following is more detailed explanation and my fiding:

serverfault.com/questions/374053/solaris-10-opencsw-git-package-issue-with-bitbucket-git-hosting

Based on some similar reports, I think it is best to
offer openssl 1.0.0h or newer, and then re-compile curl libraries (making
sure that openssl versions are used), and recompile git tools as well.

I don't know much about OpenCSW packaging and so I can't try to
recompile openssl and figure out whether upgrading helps or not.

====================================================================== 

---------------------------------------------------------------------- 
 (0009792) zephyrus00jp (reporter) - 2012-04-04 16:36
 https://www.opencsw.org/mantis/view.php?id=4931#c9792 
---------------------------------------------------------------------- 
I think it was libssl_feature instead of libcurl_feature.

Still no go.

Here is the ldd output of /opt/csw/bin/curl:


 ldd /opt/csw/bin/curl
        libcurl.so.4 =>  /opt/csw/lib/libcurl.so.4
        libidn.so.11 =>  /opt/csw/lib/libidn.so.11
        libssl.so.0.9.8 =>       /opt/csw/lib/libssl.so.0.9.8
        libcrypto.so.0.9.8 =>    /opt/csw/lib/libcrypto.so.0.9.8
        libsocket.so.1 =>        /lib/libsocket.so.1
        libnsl.so.1 =>   /lib/libnsl.so.1
        libz.so.1 =>     /opt/csw/lib/libz.so.1
        libc.so.1 =>     /lib/libc.so.1
        libintl.so.8 =>  /opt/csw/lib/libintl.so.8
        libiconv.so.2 =>         /opt/csw/lib/libiconv.so.2
        libdl.so.1 =>    /lib/libdl.so.1
        libmp.so.2 =>    /lib/libmp.so.2
        libmd.so.1 =>    /lib/libmd.so.1
        libscf.so.1 =>   /lib/libscf.so.1
        libdoor.so.1 =>  /lib/libdoor.so.1
        libuutil.so.1 =>         /lib/libuutil.so.1
        libgen.so.1 =>   /lib/libgen.so.1
        libcurl-feature.so.4 =>  /opt/csw/lib/libcurl-feature.so.4
        libfbopenssl.so.0 =>     /opt/csw/lib/libfbopenssl.so.0
        libcares.so.2 =>         /opt/csw/lib/libcares.so.2
        libssh2.so.1 =>  /opt/csw/lib/libssh2.so.1
        liblber-2.4.so.2 =>      /opt/csw/lib/liblber-2.4.so.2
        libldap-2.4.so.2 =>      /opt/csw/lib/libldap-2.4.so.2
        librtmp.so.0 =>  /opt/csw/lib/librtmp.so.0
        libresolv.so.2 =>        /lib/libresolv.so.2
        libsasl2.so.2 =>         /opt/csw/lib/libsasl2.so.2
        libm.so.2 =>     /lib/libm.so.2
zephyr at zephyrus:~/repos$

zephyr at zephyrus:~/repos$ /opt/csw/bin/curl --version
curl 7.24.0 (i386-pc-solaris2.9) libcurl/7.24.0 OpenSSL/0.9.8t zlib/1.2.5
c-ares/1.7.5 libidn/1.24 libssh2/1.3.0 librtmp/2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3
pop3s rtmp rtsp scp sftp smtp smtps telnet tftp
Features: AsynchDNS IDN IPv6 Largefile NTLM NTLM_WB SPNEGO SSL libz
zephyr at zephyrus:~/repos$


I wonder what makes the difference between the installation under
solaris10
and the working linux version.
All I could see is that linux uses openssl 1.0.0h while solaris
installation
uses openssl-0.9.8t.

TIA