Bug 2338556

Summary: openldap compiled with OpenSSL MD2 support which is no longer included in libcrypto.so.3(OPENSSL_3.0.0)
Product: [Fedora] Fedora Reporter: Simon Pichugin <spichugi>
Component: openldapAssignee: Simon Pichugin <spichugi>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: lance, spichugi, vashirov
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: openldap-2.6.9-2.fc42 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2025-01-17 04:10:57 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Simon Pichugin 2025-01-17 00:01:11 UTC
The following error occurs when attempting to build the native extensions for the {{pg}} ruby gem:

{{/lib64/libldap.so.2: undefined symbol: EVP_md2, version OPENSSL_3.0.0}}

It's not possible to build and install the {{pg}} gem into the embedded ruby included with chef/cinc.


Reproducible: Always

Steps to Reproduce:
1. Install minimal OS
2. {{sudo dnf install -y http://downloads.cinc.sh/files/stable/cinc/18.5.0/el/9/cinc-18.5.0-1.el9.x86_64.rpm}}
3. {{sudo dnf install -y automake autoconf gcc postgresql-devel}}
4. {{sudo /opt/cinc/embedded/bin/gem install pg}}
Actual Results:  

Building local extensions fails when attempting to check for PQconnectdb():

 
{code:java}
have_library: checking for PQconnectdb() in -lpq... -------------------- no
 "gcc -o conftest -I/opt/cinc/embedded/include/ruby-3.1.0/x86_64-linux -I/opt/cinc/embedded/include/ruby-3.1.0/ruby/backward -I/opt/cinc/embedded/include/ruby-3.1.0 -I. -I/usr/include -I/opt/cinc/embedded/include -O3 -D_FORTIFY_SOURCE=2 -fstack-protector -O3 -g -pipe -I/opt/cinc/embedded/include   -I/opt/cinc/embedded/include -O3 -D_FORTIFY_SOURCE=2 -fstack-protector -O3 -g -pipe -fPIC conftest.c  -L. -L/opt/cinc/embedded/lib -Wl,-rpath,/opt/cinc/embedded/lib -L/usr/lib64 -Wl,-rpath,/usr/lib64 -L/opt/cinc/embedded/lib -Wl,-rpath,/opt/cinc/embedded/lib -L. -Wl,-rpath,/opt/cinc/embedded/lib -L/opt/cinc/embedded/lib -fstack-protector-strong -L/opt/cinc/embedded/lib  -Wl,-rpath,/opt/cinc/embedded/lib -rdynamic -Wl,-export-dynamic -Wl,--no-as-needed     -Wl,-rpath,/opt/cinc/embedded/lib -L/opt/cinc/embedded/lib -lruby -lpq  -lm  -lc"
/bin/ld: /usr/lib64/libldap.so.2: undefined reference to `EVP_md2.0'
collect2: error: ld returned 1 exit status
checked program was:
/* begin */
 1: #include "ruby.h"
 2:
 3: #include <libpq-fe.h>
 4:
 5: /*top*/
 6: extern int t(void);
 7: int main(int argc, char **argv)
 8: {
 9:   if (argc > 1000000) {
10:     int (* volatile tp)(void)=(int (*)(void))&t;
11:     printf("%d", (*tp)());
12:   }
13:
14:   return !!argv[argc];
15: }
16: int t(void) { void ((*volatile p)()); p = (void ((*)()))PQconnectdb; return !p; }
/* end */
{code}
 

Expected Results:  
Successful installation of the pg gem in the embedded ruby

Comment 1 Fedora Update System 2025-01-17 02:32:03 UTC
FEDORA-2025-db614e2bd3 (openldap-2.6.9-2.fc42) has been submitted as an update to Fedora 42.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-db614e2bd3

Comment 2 Fedora Update System 2025-01-17 04:10:57 UTC
FEDORA-2025-db614e2bd3 (openldap-2.6.9-2.fc42) has been pushed to the Fedora 42 stable repository.
If problem still persists, please make note of it in this bug report.