Bug 1023017

Summary: Restore ECC support in Erlang's crypto library
Product: [Fedora] Fedora Reporter: Peter Lemenkov <lemenkov>
Component: erlangAssignee: Peter Lemenkov <lemenkov>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: rawhideCC: cesarb, eiichi.tsukata, erlang, kgadek+bugzillaredhat, lemenkov, nath.e.will, rhbugs, Tr
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: erlang-17.2.1-1.fc21 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-08-27 18:57:51 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1019390, 1086146    

Description Peter Lemenkov 2013-10-24 13:03:12 UTC
Right now ECC is disabled explicitly since it looks like Erlang's crypto library assumes that it's either available fully or not. We've just enabled few ECC curves so this confuses erlang-crypto and leads to a startup issue like this:


=ERROR REPORT==== 24-Oct-2013::16:30:48 ===
Unable to load crypto library. Failed with error:
"load_failed, Failed to load NIF library: '/usr/lib64/erlang/lib/crypto-3.1/priv/lib/crypto.so: undefined symbol: EC_GROUP_new_curve_GF2m'"
OpenSSL might not be installed on this system.

We should patch crypto module to provide available ECC bits instead of disabling it completely.

Comment 1 Travis Paul 2013-11-18 03:19:32 UTC
I was seeing the startup errors you mentioned above and I seemed to have resolved them by installing the openssl-libs package. Would it be possible to add openssl-libs as an erlang-crypto requirement until the patching you mention is complete?

Comment 2 Konrad Gądek 2013-12-13 15:50:58 UTC
What's the status of this one?

Comment 3 Peter Lemenkov 2013-12-27 09:41:22 UTC
(In reply to Konrad Gądek from comment #2)
> What's the status of this one?

Hello All!
Despite of Christmas and the rest of the Holidays we're working on it - stay tuned!

Comment 4 Eiichi Tsukata 2014-01-16 12:19:16 UTC
It seems that the following commit fix the problem:
https://github.com/RoadRunnr/otp/commit/8837c1be2ba8a3c123df3f5a87003daa9aac6539

It will be merged to the otp upstream soon.