OpenSSL 1.0.1m considered harmful on Sparc

Laurent Blume laurent at opencsw.org
Tue Apr 21 21:27:33 CEST 2015


Don't feel alone:

https://mta.openssl.org/pipermail/openssl-users/2015-April/001080.html

Though I don't see a relationship.

Dagobert: I put together a build of the package using GCC, if you want 
to give it a try.

http://buildfarm.opencsw.org/experimental.html#laurent

Laurent

Le 2015/04/20 22:24 +0200, Yann Rouillard a écrit:
> No special precaution I think.
> You can speed the rebuild by using mgar platforms-fast or mgar
> package-fast but that is not required.
>
> Yann
>
> 2015-04-20 22:11 GMT+02:00 Dagobert Michelsen <dam at opencsw.org
> <mailto:dam at opencsw.org>>:
>
>     Hi Yann,
>
>>     Am 20.04.2015 um 22:09 schrieb Yann Rouillard
>>     <yann at pleiades.fr.eu.org <mailto:yann at pleiades.fr.eu.org>>:
>>
>>     Hi everybody,
>>
>>     I still don't have enough time work on it but my advice would be
>>     to first try to recompile the openssl sparc package with all
>>     upstream Oracle patches disabled to ensure that check if it is an
>>     openssl upstream problem or not.
>>
>>     Patches to disabled are: openssl-1.0.1m-fork_safe.patch,
>>     openssl-1.0.1m-pkcs11-engine.patch, openssl-1.0.1m-wanboot.patch,
>>     openssl-1.0.1m-t4-engine.sparc.5.11.patch,
>>     openssl-1.0.1e-t4-engine-sparcv9+vis.sparc.5.11.patch.
>>
>>     I will try to answer questions from whoever can work on this.
>
>     I just had a discussion with Laurent about the rebuild: are there
>     any special precautions to be
>     taken or can it just be built by „mgar spotless && mgar platforms“?
>
>
>     Best regards
>
>        — Dago
>
>>
>>     Yann
>>
>>
>>     2015-04-20 15:22 GMT+02:00 Dagobert Michelsen <dam at opencsw.org
>>     <mailto:dam at opencsw.org>>:
>>
>>         Hi folks,
>>
>>         I want to raise the issue about OpenSSL 1.0.1m again. On Sparc
>>         we have now
>>         two serious issues:
>>
>>         - BIND fails with crypto failure
>>         https://www.opencsw.org/mantis/view.php?id=5237
>>         - Solaris 9 applications have issues with hangs in unrelated
>>         code. This has been seen
>>           at least in GIT and Python
>>
>>         How do we proceed here? While I do notice that it would be
>>         good to provide a working 1.0.1m
>>         the status quo is that bad that I would suggest rolling back
>>         to 1.0.1l at least on Sparc
>>         if the issue can not be resolved in a reasonable timeframe.
>>
>>
>>         Best regards
>>
>>           — Dago
>>
>>         --
>>         "You don't become great by trying to be great, you become
>>         great by wanting to do something,
>>         and then doing it so hard that you become great in the
>>         process." - xkcd #896
>>
>>
>
>     --
>     "You don't become great by trying to be great, you become great by
>     wanting to do something,
>     and then doing it so hard that you become great in the process." -
>     xkcd #896
>
>





More information about the maintainers mailing list