Re: openssl 1.1.1 rebuild - need for help

2018-10-23 Thread Andrzej Zawadzki
   On 21.10.2018 22:13, Adam Golebiowski wrote:

On Sun, Oct 21, 2018 at 01:37:14PM +0200, Jan Rekorajski wrote:

On Thu, 27 Sep 2018, Arkadiusz Miskiewicz wrote:


On 20/09/2018 20:37, Arkadiusz Miskiewicz wrote:

openssl 1.1.1 rebuild, if anyone wants to help here is TODO list:

[1]http://ep09.pld-linux.org/~pldth/qa.php?q=main-ready-test

Examples on how to fix things are at packages/*/openssl.patch mostly.
Also patches sometimes in debian, archlinux or upstream git of projects.


+- current TODO:

[...]


freerdp drop

this will pull down xrdp, vinagre - worth to fight for it?

   Use, freerdp2 (it's RC but works for me)

   --

   Andrzej

References

   1. http://ep09.pld-linux.org/~pldth/qa.php?q=main-ready-test
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-10-22 Thread Adam Golebiowski
On Sun, Oct 21, 2018 at 10:57:26PM +0200, Arkadiusz Miśkiewicz wrote:
> On 21/10/2018 22:13, Adam Golebiowski wrote:
> 
> > And by the same time drop php < 5.6 as well.
> > apache1 had its last release 8+ years ago, php 5.5 last release in July 
> > 2016.
> > 
> > We can drop php5.6 in couple of months - it will be eol-ed upstream by the 
> > end of the year.
> 
> I'm using all these old phps, so don't drop. All build fine with openssl 
> 1.1.

Just thought it is good time to drop some unused stuff. 
But if there are people that still use those - no object from me. 

-- 
adamg
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-10-22 Thread glen

On 10/21/18 11:13 PM, Adam Golebiowski wrote:


Current status update:

android-tools   drop
apache1-mod_ssl drop

side note - drop apache1 all together. And by the same time drop php < 5.6 as 
well.
apache1 had its last release 8+ years ago, php 5.5 last release in July 2016.

We can drop php5.6 in couple of months - it will be eol-ed upstream by the end 
of the year.


also using apache 1.3 and php < 5.6 in infra.

if want to drop something, then candidates for php are rather:
- 5.4
- 5.5
- 7.0

mostly because there are no major changes with these versions, and that 
extensions are present in pld.


but then this will remove uniqueness for pld where all php versions are 
available and the maintenance cost is not that high.


--
glen

___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-10-21 Thread Arkadiusz Miśkiewicz

On 21/10/2018 22:13, Adam Golebiowski wrote:


And by the same time drop php < 5.6 as well.
apache1 had its last release 8+ years ago, php 5.5 last release in July 2016.

We can drop php5.6 in couple of months - it will be eol-ed upstream by the end 
of the year.


I'm using all these old phps, so don't drop. All build fine with openssl 
1.1.

--
Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-10-21 Thread Jan Rękorajski
On Thu, 27 Sep 2018, Arkadiusz Miśkiewicz wrote:

> On 20/09/2018 20:37, Arkadiusz Miśkiewicz wrote:
> > 
> > openssl 1.1.1 rebuild, if anyone wants to help here is TODO list:
> > 
> > http://ep09.pld-linux.org/~pldth/qa.php?q=main-ready-test
> > 
> > Examples on how to fix things are at packages/*/openssl.patch mostly. 
> > Also patches sometimes in debian, archlinux or upstream git of projects.
> > 
> 
> +- current TODO:
[...]

Current status update:

android-tools   drop
apache1-mod_ssl drop
eagle-light drop
efl drop
erlang-exmppdrop
freeradius-server   needs update to 3.x
freerdp drop
hydra   
jhprimeminerdrop
johnneeds update to git version
kphone  format-security fixes needed
libeap-ikev2needs openssl fix
libjingle   drop
links   drop
linuxdcpp   needs c++ fix
monodevelop 
mstflintneeds -Werror=format-overflow fixes
mythtv  
nx  nxssh problematic
openssl-engine-tpm  
openvswitch 
pam-pam_p11 
pam-pam_ssh 
pgadmin3drop, TODO: finishing pgadmin4
phantomjs   
pjproject   
protoshares 
qt-plugin-qca-tls   drop, obsoleted by qca.spec
qt4-plugin-qca-ossl drop
rasdamanneeds c++ fix
skipfish
srp drop
srtpdrop, obsoleted by libsrtp2
sylpheeddrop


-- 
Jan Rękorajski| PLD/Linux
SysAdm | bagginspld-linux.org | http://www.pld-linux.org/
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-09-27 Thread Jacek Konieczny
On 27/09/2018 18.59, Arkadiusz Miśkiewicz wrote:
> 
> +- current TODO:
> 

> pjproject.spec

Does anything use it? Except Asterisk, which uses own bundled version
(the patches and configuration included there is quite important for
proper Asterisk operation).

If not, then we can drop it and update only when needed.

Jacek
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-09-24 Thread Adam Golebiowski
On Thu, Sep 20, 2018 at 08:37:36PM +0200, Arkadiusz Miśkiewicz wrote:
> 
> openssl 1.1.1 rebuild, if anyone wants to help here is TODO list:
> 
> http://ep09.pld-linux.org/~pldth/qa.php?q=main-ready-test
> 
> Examples on how to fix things are at packages/*/openssl.patch mostly. 
> Also patches sometimes in debian, archlinux or upstream git of projects.

botan should be dropped in favour of botan2:
error: #error "OpenSSL 1.1 API not supported in Botan 1.10, upgrade to 2.x"
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-09-22 Thread Bartek Szady
On 09/20/18 20:37, Arkadiusz Miśkiewicz wrote:

>
> openssl 1.1.1 rebuild, if anyone wants to help here is TODO list:
>
> http://ep09.pld-linux.org/~pldth/qa.php?q=main-ready-test

qt4-plugin-qca-ossl is obsoleted by qca.

    Bartek

___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-09-20 Thread Arkadiusz Miśkiewicz

On 20/09/2018 22:47, Jacek Konieczny wrote:

On 20/09/2018 20.57, Adam Osuchowski wrote:



I think, first of all we should to ensure that openssl 1.0.2 and 1.1.1 are
parallel installable,


Be aware that mixing openssl libraries can lead to segfaults (if binary 
uses libraries that are linked to different versions of openssl).


>>It would

allow old and new versions of the openssl API available and, thanks to it,
help in quiet migration.


+1

openssl 1.0.2 will also be required for many third-party binary software
(read: games).


just-install works at this moment, so it will work with openssl102 spec 
if someone will do it.


--
Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-09-20 Thread Jacek Konieczny
On 20/09/2018 20.57, Adam Osuchowski wrote:
> Arkadiusz Miśkiewicz wrote:
>> openssl 1.1.1 rebuild, if anyone wants to help here is TODO list:
>>
>> http://ep09.pld-linux.org/~pldth/qa.php?q=main-ready-test
>>
>> Examples on how to fix things are at packages/*/openssl.patch mostly. Also 
>> patches sometimes in debian, archlinux or upstream git of projects.
> 
> I think, first of all we should to ensure that openssl 1.0.2 and 1.1.1 are
> parallel installable, for instance by make openssl102 package. It would
> allow old and new versions of the openssl API available and, thanks to it,
> help in quiet migration.

+1

openssl 1.0.2 will also be required for many third-party binary software
(read: games).

Jacek
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en


Re: openssl 1.1.1 rebuild - need for help

2018-09-20 Thread Adam Osuchowski
Arkadiusz Miśkiewicz wrote:
> openssl 1.1.1 rebuild, if anyone wants to help here is TODO list:
>
> http://ep09.pld-linux.org/~pldth/qa.php?q=main-ready-test
>
> Examples on how to fix things are at packages/*/openssl.patch mostly. Also 
> patches sometimes in debian, archlinux or upstream git of projects.

I think, first of all we should to ensure that openssl 1.0.2 and 1.1.1 are
parallel installable, for instance by make openssl102 package. It would
allow old and new versions of the openssl API available and, thanks to it,
help in quiet migration.
___
pld-devel-en mailing list
pld-devel-en@lists.pld-linux.org
http://lists.pld-linux.org/mailman/listinfo/pld-devel-en