[PATCH 0/1] openssl: openssl-bin requires openssl-conf to run

[PATCH 0/1] openssl: openssl-bin requires openssl-conf to run

[Robert Yang]

The following changes since commit dbce6baec68d7658453b8c44159e1d1fef746151:

  oeqa/utils/qemurunner: Fix missing pid file tracebacks (2020-07-14 21:41:36 +0100)

are available in the Git repository at:

  git://git.openembedded.org/openembedded-core-contrib rbt/openssl
  http://cgit.openembedded.org/openembedded-core-contrib/log/?h=rbt/openssl

Robert Yang (1):
  openssl: openssl-bin requires openssl-conf to run

 meta/recipes-connectivity/openssl/openssl_1.1.1g.bb | 2 ++
 1 file changed, 2 insertions(+)

-- 
2.17.1

[PATCH 1/1] openssl: openssl-bin requires openssl-conf to run

[Robert Yang]

Fixed:
$ dnf install openssl-bin
$ openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days 365 -nodes -batch
Can't open /usr/lib/ssl-1.1/openssl.cnf for reading, No such file or directory

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
---
 meta/recipes-connectivity/openssl/openssl_1.1.1g.bb | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb b/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
index 47ed6b7640..815955837b 100644
--- a/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
+++ b/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
@@ -204,6 +204,8 @@ CONFFILES_openssl-conf = "${sysconfdir}/ssl/openssl.cnf"
 RRECOMMENDS_libcrypto += "openssl-conf"
 RDEPENDS_${PN}-ptest += "openssl-bin perl perl-modules bash"
 
+RDEPENDS_${PN}-bin += "openssl-conf"
+
 BBCLASSEXTEND = "native nativesdk"
 
 CVE_PRODUCT = "openssl:openssl"
-- 
2.17.1

Re: [OE-core] [PATCH 1/1] openssl: openssl-bin requires openssl-conf to run

[Richard Purdie]

On Thu, 2020-07-16 at 04:09 -0700, Robert Yang wrote:
> Fixed:
> $ dnf install openssl-bin
> $ openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days
> 365 -nodes -batch
> Can't open /usr/lib/ssl-1.1/openssl.cnf for reading, No such file or
> directory
> 
> Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
> ---
>  meta/recipes-connectivity/openssl/openssl_1.1.1g.bb | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
> b/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
> index 47ed6b7640..815955837b 100644
> --- a/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
> +++ b/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
> @@ -204,6 +204,8 @@ CONFFILES_openssl-conf =
> "${sysconfdir}/ssl/openssl.cnf"
>  RRECOMMENDS_libcrypto += "openssl-conf"
>  RDEPENDS_${PN}-ptest += "openssl-bin perl perl-modules bash"
>  
> +RDEPENDS_${PN}-bin += "openssl-conf"
> +
>  BBCLASSEXTEND = "native nativesdk"

Wasn't this addressed by:

http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=cd80b0e52ee2e008672ce910856f63176bc00480

?

Cheers,

Richard

Re: [OE-core] [PATCH 1/1] openssl: openssl-bin requires openssl-conf to run

[Robert Yang]

Hi RP,

On 7/16/20 10:05 PM, Richard Purdie wrote:
> On Thu, 2020-07-16 at 04:09 -0700, Robert Yang wrote:
>> Fixed:
>> $ dnf install openssl-bin
>> $ openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days
>> 365 -nodes -batch
>> Can't open /usr/lib/ssl-1.1/openssl.cnf for reading, No such file or
>> directory
>>
>> Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
>> ---
>>   meta/recipes-connectivity/openssl/openssl_1.1.1g.bb | 2 ++
>>   1 file changed, 2 insertions(+)
>>
>> diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
>> b/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
>> index 47ed6b7640..815955837b 100644
>> --- a/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
>> +++ b/meta/recipes-connectivity/openssl/openssl_1.1.1g.bb
>> @@ -204,6 +204,8 @@ CONFFILES_openssl-conf =
>> "${sysconfdir}/ssl/openssl.cnf"
>>   RRECOMMENDS_libcrypto += "openssl-conf"
>>   RDEPENDS_${PN}-ptest += "openssl-bin perl perl-modules bash"
>>   
>> +RDEPENDS_${PN}-bin += "openssl-conf"
>> +
>>   BBCLASSEXTEND = "native nativesdk"
> 
> Wasn't this addressed by:
> 
> http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=cd80b0e52ee2e008672ce910856f63176bc00480

The commit didn't fix the issues, it moved ${libdir}/ssl-1.1/openssl.cnf from
openssl to openssl-conf, but openssl-bin doesn't rdepend on openssl-conf, so the
issue still exists.

// Robert



> 
> ?
> 
> Cheers,
> 
> Richard
>