[Dev] handling the OpenSSL 1.0->1.1 upgrade

Andreas Grapentin andreas at grapentin.org
Fri May 12 11:19:41 GMT 2017


the same issue has now hit the armv7h port.

pacman and a couple other things will need to be rebuilt for
openssl-1.1, as well as icu-59.1

-A

On Wed, May 03, 2017 at 07:46:48AM +0200, Andreas Grapentin wrote:
> 
> I have enumerated all packages depending on openssl:
> 
>   libre/hexchat ::  openssl
>   libre/pacman ::  openssl>=1.1 openssl-1.0
>   libre/pyrit ::  openssl
>   libre/ruby ::  openssl openssl
>   libre/uboot-tools ::  openssl
>   libre/unar ::  openssl
>   libre/xchat ::  openssl
>   nonprism/sylpheed ::  openssl
>   pcr/assh ::  openssl
>   pcr/check-pacman-mtree ::  openssl
>   pcr/cherokee ::  openssl
>   pcr/dirt ::  openssl
>   pcr/galera ::  openssl
>   pcr/glance ::  python2-pyopenssl
>   pcr/grub-customizer ::  openssl
>   pcr/htmldoc ::  openssl
>   pcr/icinga ::  openssl
>   pcr/inspircd ::  openssl openssl
>   pcr/ipmiutil ::  openssl
>   pcr/italc ::  openssl
>   pcr/knot ::  openssl>=1.0.0
>   pcr/libtorrent-extended ::  openssl
>   pcr/mariadb-galera ::  openssl openssl
>   pcr/mit-scheme ::  openssl
>   pcr/monkeysphere ::  perl-crypt-openssl-rsa
>   pcr/neomutt ::  openssl
>   pcr/nginx-passenger ::  openssl
>   pcr/ocaml-ssl ::  openssl
>   pcr/openssh-knock ::  openssl
>   pcr/perspectives-server ::  openssl
>   pcr/rmilter ::  openssl
>   pcr/rstudio-desktop ::  openssl
>   pcr/samhain ::  openssl
>   pcr/snapraid ::  openssl
>   pcr/snort ::  openssl
>   pcr/softhsm ::  openssl>=1.0.0
>   pcr/strongswan ::  openssl openssl
>   pcr/tahoe-lafs ::  openssl>=1.0.2 python2-pyopenssl>=0.14
>   pcr/tcpcrypt ::  openssl openssl
>   pcr/tinc-pre ::  openssl
>   pcr/trousers ::  openssl
>   pcr/ucommon ::  openssl
>   pcr/uftp ::  openssl
> 
> generated using this script:
> 
> > #!/bin/bash
> > 
> > set -eu
> > 
> > pkgbuilds=$(find -iname 'PKGBUILD' -printf "%P\n" | sort)
> > 
> > for pkg in ${pkgbuilds}; do
> > 
> >   pushd $(dirname ${pkg}) >/dev/null
> > 
> >   errf=$(mktemp)
> >   deps=$(makepkg -A --printsrcinfo 2>${errf}| grep 'depends =' \
> >     | cut -d '=' -f2- | cut -d ':' -f1 | sed 's/^[[:space:]]*//')
> >   err=$(< ${errf})
> >   rm ${errf}
> > 
> >   popd >/dev/null
> > 
> >   if [ -n "${err}" ]; then
> >     echo "  $(dirname ${pkg}) :: ERROR" >&2
> >     echo "${err}" | sed 's/^/    | /' >&2
> >   fi
> > 
> >   match=""
> >   for dep in ${deps}; do
> >     if [[ "${dep}" =~ "${1}" ]]; then
> >       match="${match} ${dep}"
> >     fi
> >   done
> > 
> >   if [ -n "${match}" ]; then
> >     echo "  $(dirname ${pkg}) :: ${match}"
> >   fi
> > done
> 
> this also revealed that a lot of our pkgbuilds have issues like the
> following:
> 
>   libre/jquery-ui :: ERROR
>     | ==> ERROR: arch should be an array
>     | ==> ERROR: license should be an array
>     | ==> ERROR: depends should be an array
>     | ==> ERROR: sha512sums should be an array
>     | ==> ERROR: source should be an array
>     | ==> ERROR: An unknown error has occurred. Exiting...
> 
> i started looking into these, and most of them seem trivial. a complete
> list is on the pad.
> 
> I'll probably fix them over the next couple days.
> 
> -A
> 
> On Tue, Apr 25, 2017 at 11:07:58AM -0400, Luke Shumaker wrote:
> > On Tue, 25 Apr 2017 10:37:26 -0400,
> > Luke Shumaker wrote:
> > > db-check-package-libraries was designed for the purpose of identifying
> > > these packages, but it appears to not be working.
> > 
> > It seems to have to do with crashing when it sees a dangling symlink.
> > I've monkey-patched it on the server to turn abolute links into
> > relative links.
> > 
> > However, it still crashes when it encounters a symlink that points to
> > a file in another package.
> > 
> > And I needed to walk out the door 8 minutes ago, so someone else will
> > need to figure this out.
> > 
> > -- 
> > Happy hacking,
> > ~ Luke Shumaker
> > _______________________________________________
> > Dev mailing list
> > Dev at lists.parabola.nu
> > https://lists.parabola.nu/mailman/listinfo/dev
> 
> -- 
> 
> ------------------------------------------------------------------------------
> my GPG Public Key:                 https://files.grapentin.org/.gpg/public.key
> ------------------------------------------------------------------------------



> _______________________________________________
> Dev mailing list
> Dev at lists.parabola.nu
> https://lists.parabola.nu/mailman/listinfo/dev


-- 

------------------------------------------------------------------------------
my GPG Public Key:                 https://files.grapentin.org/.gpg/public.key
------------------------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: not available
URL: <https://lists.parabola.nu/pipermail/dev/attachments/20170512/822cf6cb/attachment.sig>


More information about the Dev mailing list