[MDEV-12996] install libssl1.0-dev on Sid builders Created: 2017-06-05  Updated: 2017-08-15  Resolved: 2017-07-12

Status: Closed
Project: MariaDB Server
Component/s: Compiling, Platform Debian, SSL
Fix Version/s: 10.2.8

Type: Task Priority: Blocker
Reporter: Daniel Bartholomew Assignee: Daniel Bartholomew
Resolution: Fixed Votes: 0
Labels: None

Issue Links:
Relates
relates to MDEV-12811 Backport OpenSSL 1.1 support to Maria... Closed

 Description   

From Ondřej Surý:

as Debian unstable libssl-dev is 1.1.0, and apparently 10.1, and 10.2
doesn't support that, it needs to have libssl1.0-dev installed.



 Comments   
Comment by Daniel Bartholomew [ 2017-06-07 ]

oerdnj: Do the stretch builders also need to have libssl1.0-dev installed?

Comment by Ondřej Surý (Inactive) [ 2017-06-07 ]

dbart Good catch, yes, the situation is same for stretch as for sid.

Comment by Daniel Bartholomew [ 2017-06-08 ]

oerdnj: a status update for you:

After installing libssl1.0-dev, sid and stretch builders are now failing to build 10.1 because they don't have libssl-dev installed:

Interestingly, 10.2 sid and stretch had been working:

But after the update to libssl1.0-dev, they started failing:

So there's obviously some fix that has been made in 10.2 to get them to work with libssl-dev. It would probably be better to install libssl-dev back on them and backport the ssl fix from 10.2 to 10.1.

Comment by Daniel Bartholomew [ 2017-06-20 ]

oerdnj: Any feedback on the above?

Also: Today I have updated our Stretch build/test VMs to the stable release. I'll circle back to them in a day or so to see if they are working properly and make corrections as necessary.

Comment by Ondřej Surý (Inactive) [ 2017-06-21 ]

Ok, I'll hunt for the OpenSSL 1.1.0 fix in the git.

But to be honest I think the MariaDB should be able to build with both - 1.0 and 1.1. I'll look into that if I find some free time.

Comment by Daniel Bartholomew [ 2017-06-21 ]

Totally agree that MariaDB should compile with either libssl 1.1 or 1.0.

serg or elenst: Do either of you remember who fixed the libssl issues in 10.2 for Sid and Stretch?

Comment by Georg Richter [ 2017-06-29 ]

10.1 doesn't support OpenSSL 1.1 or LibreSSL.
10.2 supports OpenSSL 1.0.1 or above (incl. 1.1.0).
Would be good to know the exact OpenSSL versions of the packages.

Comment by Daniel Bartholomew [ 2017-06-29 ]

Here are the versions currently in the stretch repositories:

Package Version Installed
libssl-dev 1.1.0f-3  
libssl1.0-dev 1.0.2l-2 X

Currently libssl1.0-dev is installed on the stretch builders. As I said in a previous comment: downgrading the builders from libssl-dev to libssl1.0-dev broke our MariaDB 10.2 builds. 10.1 builds, which were broken before making the change, are still broken, so the downgrade didn't help.

Comment by Sergei Golubchik [ 2017-07-12 ]

We need to have libssl-dev. OpenSSL 1.1. stretch is, perhaps, the only builder that can have it.

Ideally we should have both VMs, stretch+libssl-dev and stretch+libssl1.0-dev

Comment by Daniel Bartholomew [ 2017-07-12 ]

As per serg's comment, I have installed libssl-dev on the stretch builders.

The sid VMs still have libssl1.0-dev installed.

Comment by Sergei Golubchik [ 2017-07-12 ]

great, thanks! it should be enough.

Generated at Thu Feb 08 08:02:06 UTC 2024 using Jira 8.20.16#820016-sha1:9d11dbea5f4be3d4cc21f03a88dd11d8c8687422.