[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 --- Comment #20 from Kevin Zheng kevinz5...@gmail.com --- Using the version in the ports tree, I'm getting this error: *** WARNING: renaming _ssl since importing it failed: build/lib.freebsd-10.1-RELEASE-p2-amd64-2.7/_ssl.so: Undefined symbol SSLv2_method This probably happened because LibreSSL ripped out SSLv2 support, which causes the ssl module to not be built, leading to a package failure later on: Failed to build these modules: _ssl pkg-static: Unable to access file /wrkdirs/usr/ports/lang/python27/work/stage/usr/local/lib/python2.7/lib-dynload/_ssl.so: No such file or directory *** Error code 1 I've reported this problem here because all of the above patches seem to deal only with the RAND_egd() issue. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Bernard Spil spil@gmail.com changed: What|Removed |Added Attachment #15|0 |1 is obsolete|| --- Comment #18 from Bernard Spil spil@gmail.com --- Created attachment 150944 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=150944action=edit Poudriere build log Can't reproduce the pkg-static errors, see poudriere build log. Jens: Did you use the latest patch or the original one? After install of the package I have lrwxr-xr-x 1 root wheel6 Oct 3 01:49 /usr/local/bin/2to3 - 2to3-2 lrwxr-xr-x 1 root wheel8 Oct 3 01:46 /usr/local/bin/2to3-2 - 2to3-2.7 -rwxr-xr-x 1 root wheel 101 Dec 24 19:25 /usr/local/bin/2to3-2.7 -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 --- Comment #19 from Jens K. Loewe mozi...@tuxproject.de --- I used the latest one. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Bernard Spil spil@gmail.com changed: What|Removed |Added Attachment #149975|0 |1 is obsolete|| --- Comment #15 from Bernard Spil spil@gmail.com --- Created attachment 150909 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=150909action=edit Patch for Makefile Adapted for python27-2.7.9 -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 --- Comment #17 from Jens K. Loewe mozi...@tuxproject.de --- ^ this fails with Python 2.7.9 yet: === Registering installation for python27-2.7.9 pkg-static: Unable to access file /usr/ports/lang/python27/work/stage/usr/local/bin/2to3-2.7: No such file or directory pkg-static: Unable to access file /usr/ports/lang/python27/work/stage/usr/local/bin/idle2.7: No such file or directory pkg-static: Unable to access file /usr/ports/lang/python27/work/stage/usr/local/bin/pydoc2.7: No such file or directory pkg-static: Unable to access file /usr/ports/lang/python27/work/stage/usr/local/lib/python2.7/lib-dynload/ossaudiodev.so: No such file or directory *** Error code 74 -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Bernard Spil spil@gmail.com changed: What|Removed |Added Attachment #149974|0 |1 is obsolete|| --- Comment #12 from Bernard Spil spil@gmail.com --- Created attachment 149998 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=149998action=edit Single patch for this PR for the source tree Lib/ssl.py was missing Tested again, see build.log -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Bernard Spil spil@gmail.com changed: What|Removed |Added Attachment #149998|0 |1 is patch|| Attachment #149998|text/x-matlab |text/plain mime type|| -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 --- Comment #14 from Bernard Spil spil@gmail.com --- Created attachment 15 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=15action=edit Build log -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Bernard Spil spil@gmail.com changed: What|Removed |Added CC||spil@gmail.com --- Comment #7 from Bernard Spil spil@gmail.com --- Created a patch that makes the build figure out RAND_egd support. This has been submitted upstream in http://bugs.python.org/issue21356, a Python committer has indicated they willing to include this in their code. We're still willing to fix this if someone tells us how to test for LibreSSL in C code. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 --- Comment #8 from Bernard Spil spil@gmail.com --- Created attachment 149952 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=149952action=edit Patch the port to detect RAND_egd and disable it conditionally -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Bernard Spil spil@gmail.com changed: What|Removed |Added Attachment #149952|0 |1 is obsolete|| --- Comment #9 from Bernard Spil spil@gmail.com --- Created attachment 149974 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=149974action=edit Single patch for this PR for the source tree This requires the Makefile patch as well! -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 --- Comment #11 from Bernard Spil spil@gmail.com --- Created attachment 149976 -- https://bugs.freebsd.org/bugzilla/attachment.cgi?id=149976action=edit Output of the test_ssl unit test There are expected failures/errors in this test, SSLv23 and SSLv3 are not supported by LibreSSL -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Jens K. Loewe mozi...@tuxproject.de changed: What|Removed |Added CC||mozi...@tuxproject.de --- Comment #6 from Jens K. Loewe mozi...@tuxproject.de --- Annoyingly, everything that needs py27 as a dependence (like py-fail2ban) stops installation with signal 11 if LibreSSL is installed. The main problem is that touch .../_ssl.so is required for python27 before make install works as it should. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Kubilay Kocak ko...@freebsd.org changed: What|Removed |Added Assignee|freebsd-python@FreeBSD.org |pyt...@freebsd.org --- Comment #5 from Kubilay Kocak ko...@freebsd.org --- Canonicalise python@ assignment. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Marcus von Appen m...@freebsd.org changed: What|Removed |Added Assignee|freebsd-ports-bugs@FreeBSD. |freebsd-python@FreeBSD.org |org | -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 --- Comment #2 from meyer.arn...@gmail.com --- (In reply to Marcus von Appen from comment #1) Root problem: As soon as libressl is installed via ports, lang/pythonXX and other ports will try to pick it up, most likely due to the include and linker flags order. This is problematic in two regards: * lang/python27 does not have an explicit BUILD/RUN_DEPENDS on libressl, since libressl is not officially supported by upstream (yet) * libressl is API and ABI incompatible with OpenSSL, so depending on the system status (libressl installed or not), python will take the one or other. I do not like the patch, since it would disable the function for both, OpenSSL and libressl and thus effectively change the behaviour of lang/pythonXX. Does RAND_egd even work on FreeBSD? I also tried to preserve the python ssl api by having PySSL_RAND_egd just return an error. So I don't think it's behaviour has changed. Might have missed something, tho. We need to get two things right: * handle OpenSSL support correctly and explicitly use OpenSSL, so that an installed SSL replacement does not cause a wrong and unintended behaviour * offer users to link against libressl explicitly (via an OPTION), which can cause different behaviour. How about this: * Add smt. like WITH_OPENSSL_LIBRE and some logic to bsd.openssl.mk * Have the libressl port fail to build without that flag set. * Add a static library or c file with dummy functions(RAND_egd, ...) to libressl. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 Marcus von Appen m...@freebsd.org changed: What|Removed |Added CC||freebsd-port...@freebsd.org ||, vsevo...@freebsd.org --- Comment #3 from Marcus von Appen m...@freebsd.org --- (In reply to meyer.arne83 from comment #2) (In reply to Marcus von Appen from comment #1) Root problem: As soon as libressl is installed via ports, lang/pythonXX and other ports will try to pick it up, most likely due to the include and linker flags order. This is problematic in two regards: * lang/python27 does not have an explicit BUILD/RUN_DEPENDS on libressl, since libressl is not officially supported by upstream (yet) * libressl is API and ABI incompatible with OpenSSL, so depending on the system status (libressl installed or not), python will take the one or other. I do not like the patch, since it would disable the function for both, OpenSSL and libressl and thus effectively change the behaviour of lang/pythonXX. Does RAND_egd even work on FreeBSD? I also tried to preserve the python ssl api by having PySSL_RAND_egd just return an error. So I don't think it's behaviour has changed. Might have missed something, tho. This is just the minor part of the issue. The bigger problem is the library being pulled in. We need to get two things right: * handle OpenSSL support correctly and explicitly use OpenSSL, so that an installed SSL replacement does not cause a wrong and unintended behaviour * offer users to link against libressl explicitly (via an OPTION), which can cause different behaviour. How about this: * Add smt. like WITH_OPENSSL_LIBRE and some logic to bsd.openssl.mk * Have the libressl port fail to build without that flag set. That sounds reasonable. I added the libressl maintainer and portmgr@ to this issue to get their feedback on it. * Add a static library or c file with dummy functions(RAND_egd, ...) to libressl. That might contradict the purpose of libressl and adds a can of worms (local patches), which should be avoided. Best'd be to ask the upstream developers of libressl about such things, I think. -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
[Bug 192511] [patch] fix lang/python27 build with libressl
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=192511 --- Comment #4 from meyer.arn...@gmail.com --- (In reply to Marcus von Appen from comment #3) (In reply to meyer.arne83 from comment #2) (In reply to Marcus von Appen from comment #1) [...] We need to get two things right: * handle OpenSSL support correctly and explicitly use OpenSSL, so that an installed SSL replacement does not cause a wrong and unintended behaviour * offer users to link against libressl explicitly (via an OPTION), which can cause different behaviour. How about this: * Add smt. like WITH_OPENSSL_LIBRE and some logic to bsd.openssl.mk * Have the libressl port fail to build without that flag set. That sounds reasonable. I added the libressl maintainer and portmgr@ to this issue to get their feedback on it. I implemented the WITH_OPENSSL_LIBRE logic on my laptop. Tested it. Looks good so far. The only issue is: Are there ports who have a hard dependency on openssl/ports? * Add a static library or c file with dummy functions(RAND_egd, ...) to libressl. That might contradict the purpose of libressl and adds a can of worms (local patches), which should be avoided. Best'd be to ask the upstream developers of libressl about such things, I think. Yeah. You're right about that. I have a patch for libressl that adds back the RAND_egd api. But the functions just return -1 (means no connection to egd). As RAND_egd is the main reason for breakage, and basically useless, that seems like a tolerable approach to me. That way, we don't have to patch every user of that api. With that patch and the change to bsd.openssl.mk I can compile python27 without my first patch. I can open up a new bug with my patches, if anyone is interested... -- You are receiving this mail because: You are the assignee for the bug. ___ freebsd-python@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-python To unsubscribe, send any mail to freebsd-python-unsubscr...@freebsd.org
