https://bugzilla.redhat.com/show_bug.cgi?id=1495985



--- Comment #32 from Sergey Avseyev <[email protected]> ---
According to the https://fedoraproject.org/wiki/Packaging:CryptoPolicies, it
should be enough to use "PROFILE=SYSTEM", but rpmlint still complains.

The library after patching has the only place, where I use
SSL_CTX_set_cipher_list:

$ grep -Rni SSL_CTX_set_cipher_list rpmbuild/BUILD/libcouchbase-2.8.1
rpmbuild/BUILD/libcouchbase-2.8.1/src/ssl/ssl_common.c:280:   
SSL_CTX_set_cipher_list(ret->ctx, "PROFILE=SYSTEM");

I would call it false-positive, as rpmlint does something primitive like this:

$ strings /usr/lib64/libcouchbase.so.2.0.49 | grep SSL_CTX_set_cipher_list
SSL_CTX_set_cipher_list

Which obviously does not actually check the arguments.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to