Bug 756831

Summary:	crypto module function subject_name_hash returns negative numbers on 32 bit hosts
Product:	[Fedora] Fedora	Reporter:	Nathanael Noblet <nathanael>
Component:	pyOpenSSL	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	15	CC:	tmraz
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Unspecified
Whiteboard:
Fixed In Version:	pyOpenSSL-0.12-1.fc15	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-01-21 21:53:38 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Nathanael Noblet 2011-11-24 19:18:33 UTC

Description of problem:
The python module uses PyLong_FromLong instead of PyLong_FromLongLong or FromUnsignedLong which on 32 bit hosts results in negative responses. This affects programs like func who uses the hashes as part of their ACL infrastructure.

Version-Release number of selected component (if applicable):
0.10-3.fc15

How reproducible:
Always


This is a known upstream bug: https://bugs.launchpad.net/pyopenssl/+bug/851838 Which is now fixed in 0.11. Not sure if updating F15 to the same version as F16 (which version is using FromLongLong so doesn't trigger the bug) is feasible. However this bug is affecting many of my 32bit machines.

Comment 1 Nathanael Noblet 2011-11-24 19:25:35 UTC

I used mock to build F16 src packages for F15... I found no regressions and it does fix my issue with func. Granted I don't know everything that depends on pyOpenSSL.

Comment 2 seth vidal 2012-01-03 20:46:34 UTC

Tomas,
 any status change on this? It makes things difficult to use func's minion-to-minion/acls without this change.

Thanks

Comment 3 Fedora Update System 2012-01-04 14:00:44 UTC

pyOpenSSL-0.12-1.fc15 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/pyOpenSSL-0.12-1.fc15

Comment 4 Fedora Update System 2012-01-05 20:54:13 UTC

Package pyOpenSSL-0.12-1.fc15:
* should fix your issue,
* was pushed to the Fedora 15 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing pyOpenSSL-0.12-1.fc15'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-0095/pyOpenSSL-0.12-1.fc15
then log in and leave karma (feedback).

Comment 5 Fedora Update System 2012-01-21 21:53:38 UTC

pyOpenSSL-0.12-1.fc15 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.