Bug 2071020

Summary: openssl-1.1.1-cleanup-peer-point-reneg.patch prevents build in no-ec
Product: Red Hat Enterprise Linux 8 Reporter: Dmitry Belyavskiy <dbelyavs>
Component: opensslAssignee: Dmitry Belyavskiy <dbelyavs>
Status: CLOSED CURRENTRELEASE QA Contact: Alicja Kario <hkario>
Severity: medium Docs Contact:
Priority: medium    
Version: 8.6CC: dbelyavs, hkario, kraxel, mrezanin, osteffen, ssorce
Target Milestone: rcKeywords: Triaged
Target Release: ---Flags: pm-rhel: mirror+
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-03-15 13:47:25 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2063131, 2063132, 2067231, 2067232, 2074834, 2074843    
Attachments:
Description Flags
Proposed fix none

Description Dmitry Belyavskiy 2022-04-01 15:09:14 UTC 
Created attachment 1869976 [details]
Proposed fix

openssl-1.1.1-cleanup-peer-point-reneg.patch prevents build in no-ec (edk2 firmware does that).

Reported by Gerd Hoffmann
Comment 1 Gerd Hoffmann 2022-07-20 15:03:19 UTC 
Ping.  I'd like sync the openssl source code in the edk2 package for 8.7.
The build failure blocks that though.  So far we have been lucky with edk2
that the openssl cve bugs poping up in recent months didn't affect us,
but in case that changes I'd very much prefer pre-existing build problems
not delaying the delivery of security fixes.

So can you please add the patch to the repo (git://pkgs.devel.redhat.com/rpms/openssl)?
rhel-8.7.0 branch is enough.  Thanks.
Comment 2 Dmitry Belyavskiy 2022-07-20 15:16:49 UTC 
Dear Gerd,

Will it be OK if we just add this patch to 8.7.0?
Comment 3 Gerd Hoffmann 2022-07-21 05:41:43 UTC 
(In reply to Gerd Hoffmann from comment #1)
> rhel-8.7.0 branch is enough.

(In reply to Dmitry Belyavskiy from comment #2)
> Will it be OK if we just add this patch to 8.7.0?

Yes.