Bug 1441528

Summary:	[RFE][Rebase] Rebase ovirt-engine on apache-sshd 2.1.0
Product:	[oVirt] ovirt-engine	Reporter:	Sandro Bonazzola <sbonazzo>
Component:	Build.Maven	Assignee:	Martin Perina <mperina>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Eli Mesika <emesika>
Severity:	medium	Docs Contact:
Priority:	high
Version:	future	CC:	bugs, juan.hernandez, lsvaty, mgoldboi, mperina
Target Milestone:	ovirt-4.3.0	Keywords:	FutureFeature, Rebase
Target Release:	---	Flags:	rule-engine: ovirt-4.3+ mgoldboi: planning_ack+ mperina: devel_ack+ pstehlik: testing_ack+
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	ovirt-engine-4.3.0_rc	Doc Type:	Rebase: Bug Fixes and Enhancements
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2019-02-13 07:44:53 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	Infra	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1490404

Description Sandro Bonazzola 2017-04-12 07:51:55 UTC

ovirt-engine is building on apache-sshd 0.12.0 and suing system provided version which for FEdora >=25 means 0.14.0.

Please rebase the code on 0.14.0.
We'd like to package apache-sshd 0.14.0 for CentOS / RHEL as well (see bug #1441525)

Comment 1 Martin Perina 2017-04-13 22:16:28 UTC

We are going to upgrade to latest stable apache-sshd 1.2.0 in 4.2, there's no reason to stay with no longer supported version. But it will take some time as API is quite different

Comment 2 Sandro Bonazzola 2017-04-14 11:17:07 UTC

(In reply to Martin Perina from comment #1)
> We are going to upgrade to latest stable apache-sshd 1.2.0 in 4.2, there's
> no reason to stay with no longer supported version. But it will take some
> time as API is quite different

Please note 1.2.0 isn't in RHEL and won't land in Fedora soon, see https://bugzilla.redhat.com/show_bug.cgi?id=1441525#c3
That said, up to you :-)

Comment 3 Martin Perina 2017-04-19 06:03:38 UTC

(In reply to Sandro Bonazzola from comment #2)
> (In reply to Martin Perina from comment #1)
> > We are going to upgrade to latest stable apache-sshd 1.2.0 in 4.2, there's
> > no reason to stay with no longer supported version. But it will take some
> > time as API is quite different
> 
> Please note 1.2.0 isn't in RHEL and won't land in Fedora soon, see
> https://bugzilla.redhat.com/show_bug.cgi?id=1441525#c3
> That said, up to you :-)

OK, but I think we need those new enhancements in 1.2.0 especially around newly supported ciphers, so this will stay in rhevm-dependencies

Comment 4 Sandro Bonazzola 2017-05-05 14:54:36 UTC

Just a note 1.4.0 is out: https://release-monitoring.org/project/15120/

Comment 5 Moran Goldboim 2018-01-02 11:47:58 UTC

raising priority due to our will to approach security standards better.

Comment 6 Sandro Bonazzola 2018-09-06 12:44:44 UTC

2.0.0 has been released meanwhile

Comment 7 Sandro Bonazzola 2019-02-13 07:44:53 UTC

This bugzilla is included in oVirt 4.3.0 release, published on February 4th 2019.

Since the problem described in this bug report should be
resolved in oVirt 4.3.0 release, it has been closed with a resolution of CURRENT RELEASE.

If the solution does not work for you, please open a new bug report.