Bug 2022026
| Summary: | krb5: FTBFS with OpenSSL 3.0.0 | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Sahana Prasad <sahana> |
| Component: | krb5 | Assignee: | Alexander Bokovoy <abokovoy> |
| Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | abokovoy, j, mhroncok, npmccallum, sbose, ssorce, zbyszek |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | krb5-1.19.2-4.fc36 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-12-03 15:18:14 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 1825937, 1992484 | ||
|
Description
Sahana Prasad
2021-11-10 15:31:30 UTC
This pulls in openssl1.1 to the default buildroot. I also see that it appears to be fixed in c9s: https://gitlab.com/redhat/centos-stream/rpms/krb5/-/commits/c9s Yes, there is a plan to pull a fix from upstream similar to c9s. If this can wait couple days... We are busy with security updates in Samba and FreeIPA. Hi, I'd like to start testing systemd transition from gcrypt to openssl, and it would be great if krb5 could be rebuilt against openssl-3. Currently that fails because ld refuses to link to libcrypto.so.3 and /usr/lib64/libgssapi_krb5.so.2 which is linked to libcrypto.so.1.1. FWIW, I rebuilt the cs9 version in mock and I'm using that locally and it seems to work fine. I'll look at this over coming weekend. Sorry. Fixed in krb5-1.19.2-4.fc36 https://bodhi.fedoraproject.org/updates/FEDORA-2021-d13ffd8da0 $ rpm -q --requires -p https://kojipkgs.fedoraproject.org//packages/krb5/1.19.2/4.fc36/x86_64/krb5-libs-1.19.2-4.fc36.x86_64.rpm|grep libcrypto.so libcrypto.so.3()(64bit) libcrypto.so.3(OPENSSL_3.0.0)(64bit) Zbyszek, could you please verify and close this bug? Not caused by krb5 at all, but removing openssl1.1 from the buildroot broke cmake: /usr/bin/cmake: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LAHTJWRB5HEPY3YNM7BSDGVZHGIHRORN/ And appstream-util: appstream-util: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory https://koschei.fedoraproject.org/build/11634367 I wonder how is this possible :/ (In reply to Miro Hrončok from comment #7) > Not caused by krb5 at all, but removing openssl1.1 from the buildroot broke > cmake: > > /usr/bin/cmake: error while loading shared libraries: libcrypto.so.1.1: > cannot open shared object file: No such file or directory > > https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/ > thread/LAHTJWRB5HEPY3YNM7BSDGVZHGIHRORN/ > > And appstream-util: > > appstream-util: error while loading shared libraries: libcrypto.so.1.1: > cannot open shared object file: No such file or directory > > https://koschei.fedoraproject.org/build/11634367 > > > I wonder how is this possible :/ https://bugzilla.redhat.com/show_bug.cgi?id=2028852 Thanks! Other bugs notwithstanding, krb5 is fixed. I'll close this here. The issue is only for rawhide, and the update has gone stable. |