Bug 1516866 - ima-evm-utils: Builds against compat-openssl10-devel which will be removed
Summary: ima-evm-utils: Builds against compat-openssl10-devel which will be removed
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: ima-evm-utils
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Bruno Meneguele
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 1383740 1485247
TreeView+ depends on / blocked
 
Reported: 2017-11-23 13:05 UTC by Tomas Mraz
Modified: 2017-12-06 16:50 UTC (History)
4 users (show)

Fixed In Version: ima-evm-utils-1.0-3.fc28
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-12-06 16:50:45 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Tomas Mraz 2017-11-23 13:05:21 UTC
The package currently depends on compat-openssl10-devel which will be removed. It needs to be ported to OpenSSL 1.1 API and built against regular openssl-devel package.

If you need help with porting the package feel free to contact me.

Comment 1 Bruno Meneguele 2017-11-23 13:14:21 UTC
Hi Tomas,

I'll take over this task considering I'm the one actively maintaining ima-evm-utils on Fedora.

About the port to OpenSSL 1.1, it's already in my TODO list for the next days. I've already took a look on that and it seems that there aren't to many things to be updated, but thank you for your help, be sure that I'll get in touch in case of something more complicated appears :).

ASAP I'll start to work on it!

Comment 2 Bruno Meneguele 2017-12-01 19:39:58 UTC
Hi, 

the patch is ready, but I've just sent an email to upstream's mailing list questioning about their interest in make the package openssl11-ready instead of a rpm specfile patch. In case they don't show up with something I'll push the patch I've made. Let's wait till next week at least.

Thanks.

Comment 3 Bruno Meneguele 2017-12-05 19:13:54 UTC
Upstream has plans to update the code to openssl1.1 api, and there is a chance that the patch that will be applied to the fedora's rpm can be the one to be applied in upstream as well.

  https://www.spinics.net/lists/linux-integrity/msg00897.html

However, they also have plans to add new features till next release thus I don't really know how long it'll take to be ready. Hence I'll push the new specfile and patch for openssl1.1 support.

Thanks.

Comment 4 Bruno Meneguele 2017-12-06 16:50:45 UTC
ima-evm-utils-1.0-3.fc28 pushed and built for rawhide:

https://src.fedoraproject.org/rpms/ima-evm-utils/c/f7d95ad7b17e0b0c614bf043d2af7efb4306ef9d
https://koji.fedoraproject.org/koji/buildinfo?buildID=1007760

I'll keep an eye in upstream's code base for official OpenSSL1.1 support.


Note You need to log in before you can comment on or make changes to this bug.