commit:     a394d84a43ea75211b12edb7f57e1cb8377401b8
Author:     Michał Górny <mgorny <AT> gentoo <DOT> org>
AuthorDate: Mon Jul 26 14:23:21 2021 +0000
Commit:     Michał Górny <mgorny <AT> gentoo <DOT> org>
CommitDate: Mon Jul 26 14:23:51 2021 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=a394d84a

dev-python/cryptography: Force-disable SSLv3 to avoid ABI breakage

Force-disable SSLv3 even if OpenSSL is built with SSLv3.  Otherwise
disabling sslv3 flag on dev-libs/openssl causes ABI breakage that
requires manual intervention.

Closes: https://bugs.gentoo.org/803887
Signed-off-by: Michał Górny <mgorny <AT> gentoo.org>

 .../{cryptography-3.4.7-r1.ebuild => cryptography-3.4.7-r2.ebuild}    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/dev-python/cryptography/cryptography-3.4.7-r1.ebuild 
b/dev-python/cryptography/cryptography-3.4.7-r2.ebuild
similarity index 92%
rename from dev-python/cryptography/cryptography-3.4.7-r1.ebuild
rename to dev-python/cryptography/cryptography-3.4.7-r2.ebuild
index 0bc251d53b5..57dc03c410a 100644
--- a/dev-python/cryptography/cryptography-3.4.7-r1.ebuild
+++ b/dev-python/cryptography/cryptography-3.4.7-r2.ebuild
@@ -48,6 +48,10 @@ PATCHES=(
 src_prepare() {
        default
 
+       # avoid automagic dependency on dev-libs/openssl[sslv3]
+       # https://bugs.gentoo.org/789450
+       export CPPFLAGS="${CPPFLAGS} -DOPENSSL_NO_SSL3_METHOD=1"
+
        # work around availability macros not supported in GCC (yet)
        if [[ ${CHOST} == *-darwin* ]] ; then
                local darwinok=0

Reply via email to