New: Bump openssl package to the latest version
https://bugs.busybox.net/show_bug.cgi?id=73
Host: i686-linux
Target: arm-softfloat-linux-uclibcgnueabi
Summary: Bump openssl package to the latest version
Product: buildroot
Version: unspecified
Platform: PC
OS/Version: Linux
Status: NEW
Severity: enhancement
Priority: P5
Component: Outdated package
AssignedTo: unassigned at buildroot.uclibc.org
ReportedBy: gustavo at zacarias.com.ar
CC: buildroot at uclibc.org
Estimated Hours: 0.0
2009.02-rc2 uses openssl-0.9.8g which has some security issues. This patch bumps the package to openssl-0.9.8j.
It also moves openssldir from /usr/lib/ssl to /etc/ssl otherwise the openssl binary will look for it's configuration file in that odd directory. Tested for an arm target, someone should test if this didn't break avr32 before comitting (i can try in a couple of days with my atngw100).
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
https://bugs.busybox.net/show_bug.cgi?id=73
--- Comment #1 from Gustavo Zacarias <[email protected]> 2009-01-26 18:39:32 UTC --- Patch exceeds 400k so i can't attach, fetch from
http://www.zacarias.com.ar/openssl-0.9.8j.patch
Sorry!
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
Peter Korsgaard <[email protected]> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |jacmet at uclibc.org
Status|NEW |ASSIGNED--- Comment #2 from Peter Korsgaard <[email protected]> 2009-01-26 19:46:25 UTC --- That's a big patch. We're unfortunately this close to the release that I won't commit it until after the release, unless I get acks from other archs.
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
--- Comment #3 from Gustavo Zacarias <[email protected]> 2009-01-26 21:19:12 UTC --- The patch is big because of patch file renaming.
Basically it's only that plus s/0.9.8g/0.9.8j/ and the change to openssldir in the .mk file.
Probably better to apply after release, just remember it later ;-)
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
Hamish Moffatt <[email protected]> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |hamish at cloud.net.au
--- Comment #4 from Hamish Moffatt <[email protected]> 2009-01-27 01:12:26 UTC --- I've been using 0.9.8i locally with no issues
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
--- Comment #5 from Hamish Moffatt <[email protected]> 2009-01-27 01:22:46 UTC --- I think upgrading to 0.9.8j would be good, as this is a security-sensitive package and we should do our best to keep it up to date.
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
--- Comment #6 from Gustavo Zacarias <[email protected]> 2009-01-27 16:35:06 UTC --- The avr32 needs a rework, it won't apply cleanly.
Anyone interested in avr32 to do it?
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
Hans-Christian Egtvedt <[email protected]> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |hans-
| |christian.egtvedt at atmel.com--- Comment #7 from Hans-Christian Egtvedt <[email protected]> 2009-01-28 06:45:24 UTC --- Just leave out AVR32 for now, I think the security stuff is more important.
The openssl.mk needs a little love before AVR32 will work, you have to disable it selecting an optimization for AVR32 arch.
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
--- Comment #8 from Gustavo Zacarias <[email protected]> 2009-01-28 11:35:12 UTC --- Created an attachment (id=43)
--> (https://bugs.busybox.net/attachment.cgi?id=43)
Patch to bump to 0.9.8j
Here's a simplified patch, basically renames the relevant 0.9.8g patches for 0.9.8j, add a no-fips patch (removes newly introduced garbage in the target for 0.9.8j), and moves openssldir from /usr/lib/ssl to /etc/ssl.
I basically ignored the avr32 patch on this take.
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
Peter Korsgaard <[email protected]> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|ASSIGNED |RESOLVED
Resolution| |FIXED--- Comment #9 from Peter Korsgaard <[email protected]> 2009-03-01 21:03:45 UTC --- version bumped r25433 by Hamish, care to check that everything is like you wanted?
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
[Buildroot] [Bug 73] Bump openssl package to the latest version
In reply to bugzilla at busybox.nethttps://bugs.busybox.net/show_bug.cgi?id=73
--- Comment #10 from Gustavo Zacarias <[email protected]> 2009-03-02 16:42:30 UTC --- Looks ok, though it still leaves openssldir pointing to /usr/lib/ssl rather than the common approach of /etc/ssl.
Being mostly a configuration directory it should really reside in /etc/ssl.
Signature · 3 lines
Configure bugmail: https://bugs.busybox.net/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.