Bug 1199274

Summary:	crypto-policies-20150305-1.git098a8a6.fc23.noarch breaks openssl using apps
Product:	[Fedora] Fedora	Reporter:	Kevin Fenzi <kevin>
Component:	crypto-policies	Assignee:	Nikos Mavrogiannopoulos <nmavrogi>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	nmavrogi, vondruch
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	crypto-policies-20150305-2.git44afaa1.fc22	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-03-06 12:55:40 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Kevin Fenzi 2015-03-05 19:23:07 UTC

After installing crypto-policies-20150305-1.git098a8a6.fc23.noarch at least wget and koji break here: 

% wget https://kojipkgs.fedoraproject.org//packages/python-cryptography/0.6.1/2.fc22/x86_64/python-cryptography-0.6.1-2.fc22.x86_64.rpm
--2015-03-05 11:36:08--  https://kojipkgs.fedoraproject.org//packages/python-cryptography/0.6.1/2.fc22/x86_64/python-cryptography-0.6.1-2.fc22.x86_64.rpm
OpenSSL: error:140E6118:SSL routines:SSL_CIPHER_PROCESS_RULESTR:invalid command
OpenSSL: error:140A90A1:SSL routines:SSL_CTX_new:library has no ciphers
Disabling SSL due to encountered errors.

% fedpkg build --nowait
Could not execute build: [('SSL routines', 'SSL_CIPHER_PROCESS_RULESTR', 'invalid command'), ('SSL routines', 'SSL_CTX_new', 'library has no ciphers')]

Comment 1 Nikos Mavrogiannopoulos 2015-03-06 07:36:07 UTC

Thanks for reporting. Did you install it on a non-f22 or f23 system?

Comment 2 Vít Ondruch 2015-03-06 10:36:30 UTC

I observer these build errors:

http://koschei.cloud.fedoraproject.org/package/ruby
http://koschei.cloud.fedoraproject.org/package/rubygem-mail

Comment 3 Nikos Mavrogiannopoulos 2015-03-06 10:59:44 UTC

I've just submitted builds which shouldn't cause that error. If that's the case please close the issue.

Comment 4 Vít Ondruch 2015-03-06 12:30:33 UTC

rubygem-mail is building again.

Comment 5 Kevin Fenzi 2015-03-06 12:55:40 UTC

(In reply to Nikos Mavrogiannopoulos from comment #1)
> Thanks for reporting. Did you install it on a non-f22 or f23 system?

no. This was my rawhide (f23) laptop. 

I can confirm that the crypto-policies-20150305-2.git44afaa1.fc23.noarch build works fine. ;)

Comment 6 Fedora Update System 2015-03-20 12:56:05 UTC

crypto-policies-20150305-2.git44afaa1.fc22 has been submitted as an update for Fedora 22.
https://admin.fedoraproject.org/updates/crypto-policies-20150305-2.git44afaa1.fc22

Comment 7 Fedora Update System 2015-03-26 22:02:02 UTC

crypto-policies-20150305-2.git44afaa1.fc22 has been pushed to the Fedora 22 stable repository.  If problems still persist, please make note of it in this bug report.