Re: [yocto-security] Open ssl version

Re: [yocto-security] Open ssl version

[Vishwanath Chandapur]

[-- Attachment #1: Type: text/plain, Size: 3270 bytes --]

Hi Team,

I have set opnessl version in sumo but getting below errors.


*PREFERRED_VERSION_openssl = "1.1.0i"*


*Logs:*

NOTE: Resolving any missing task queue dependencies

NOTE: preferred version 1.1.0i of openssl not available (for item libssl)
NOTE: versions of openssl available: 1.0.2p
NOTE: preferred version 1.1.0i of openssl not available (for item openssl10)
NOTE: versions of openssl available: 1.0.2p
NOTE: preferred version 1.1.0i of openssl not available (for item openssl-conf)
NOTE: versions of openssl available: 1.0.2p


ERROR: Multiple versions of openssl are due to be built
(/home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/openssl_1.0.2p.bb
/home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/openssl_1.1.0i.bb).
Only one version of a given PN should be built in any given build. You
likely need to set PREFERRED_VERSION_openssl to select the correct
version or don't depend on multiple versions.


With Regards
Vishwa

On Fri, Dec 14, 2018 at 5:31 PM Burton, Ross <ross.burton@intel.com> wrote:

> How did you set it?
>
> Also this isn't relevant to yocto-security, please move to yocto@.
>
> Ross
> On Fri, 14 Dec 2018 at 11:53, Vishwanath Chandapur <vishwavtu@gmail.com>
> wrote:
> >
> > Hi Ross,
> >
> > I tried to enable by using PREFERRED_VERSION.
> >
> > But getting these errors .
> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>
> > NOTE: Resolving any missing task queue dependencies
> > NOTE: preferred version 1.0.% of openssl not available (for item openssl)
> > NOTE: versions of openssl available: 1.1.0i
> > NOTE: preferred version 1.0.% of openssl-native not available (for item
> openssl-native)
> > NOTE: versions of openssl-native available: 1.1.0i
> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl)
> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> > NOTE: preferred version 1.0.% of openssl not available (for item
> openssl-dev)
> > NOTE: versions of openssl available: 1.1.0i
> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl-dev)
> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> > ERROR: Nothing RPROVIDES 'libssl
> > >>>>>>>>>>>>>>>>>>>>>>>>>>>
> >
> > With Regards
> > Vishwa
> >
> >
> > On Thu, 13 Dec 2018 at 5:57 PM, Burton, Ross <ross.burton@intel.com>
> wrote:
> >>
> >> Yes, Sumo has OpenSSL 1.1 but it isn't enabled by default because at
> >> the time of release some important pieces of software had not yet
> >> migrated.
> >>
> >> You can switch by using PREFERRED_VERSION.
> >>
> >> Ross
> >> On Thu, 13 Dec 2018 at 12:13, Vishwanath Chandapur <vishwavtu@gmail.com>
> wrote:
> >> >
> >> > Hi Team,
> >> >
> >> > Currently we are migrating to poly sumo version .
> >> > But we have requirement to use 1.1.0 but poky is still supporting
> 1.0.2
> >> >
> >> > I would like know if latest OpenSSL available for future release .
> >> >
> >> > With Regard
> >> > Vishwa
> >> > _______________________________________________
> >> > yocto-security mailing list
> >> > yocto-security@yoctoproject.org
> >> > https://lists.yoctoproject.org/listinfo/yocto-security
>

[-- Attachment #2: Type: text/html, Size: 6053 bytes --]

Re: [yocto-security] Open ssl version

[Alexander Kanavin]

It's likely that you ask bitbake to build something that has a hard
dependency on openssl 1.0. Most probably openssh.

Alex

On Thu, 20 Dec 2018 at 05:30, Vishwanath Chandapur <vishwavtu@gmail.com> wrote:
>
> Hi Team,
>
> I have set opnessl version in sumo but getting below errors.
>
>
> PREFERRED_VERSION_openssl = "1.1.0i"
>
>
> Logs:
>
> NOTE: Resolving any missing task queue dependencies
>
> NOTE: preferred version 1.1.0i of openssl not available (for item libssl)
> NOTE: versions of openssl available: 1.0.2p
> NOTE: preferred version 1.1.0i of openssl not available (for item openssl10)
> NOTE: versions of openssl available: 1.0.2p
> NOTE: preferred version 1.1.0i of openssl not available (for item openssl-conf)
> NOTE: versions of openssl available: 1.0.2p
>
>
> ERROR: Multiple versions of openssl are due to be built (/home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/openssl_1.0.2p.bb /home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/openssl_1.1.0i.bb). Only one version of a given PN should be built in any given build. You likely need to set PREFERRED_VERSION_openssl to select the correct version or don't depend on multiple versions.
>
>
> With Regards
> Vishwa
>
> On Fri, Dec 14, 2018 at 5:31 PM Burton, Ross <ross.burton@intel.com> wrote:
>>
>> How did you set it?
>>
>> Also this isn't relevant to yocto-security, please move to yocto@.
>>
>> Ross
>> On Fri, 14 Dec 2018 at 11:53, Vishwanath Chandapur <vishwavtu@gmail.com> wrote:
>> >
>> > Hi Ross,
>> >
>> > I tried to enable by using PREFERRED_VERSION.
>> >
>> > But getting these errors .
>> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>
>> > NOTE: Resolving any missing task queue dependencies
>> > NOTE: preferred version 1.0.% of openssl not available (for item openssl)
>> > NOTE: versions of openssl available: 1.1.0i
>> > NOTE: preferred version 1.0.% of openssl-native not available (for item openssl-native)
>> > NOTE: versions of openssl-native available: 1.1.0i
>> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for item nativesdk-openssl)
>> > NOTE: versions of nativesdk-openssl available: 1.1.0i
>> > NOTE: preferred version 1.0.% of openssl not available (for item openssl-dev)
>> > NOTE: versions of openssl available: 1.1.0i
>> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for item nativesdk-openssl-dev)
>> > NOTE: versions of nativesdk-openssl available: 1.1.0i
>> > ERROR: Nothing RPROVIDES 'libssl
>> > >>>>>>>>>>>>>>>>>>>>>>>>>>>
>> >
>> > With Regards
>> > Vishwa
>> >
>> >
>> > On Thu, 13 Dec 2018 at 5:57 PM, Burton, Ross <ross.burton@intel.com> wrote:
>> >>
>> >> Yes, Sumo has OpenSSL 1.1 but it isn't enabled by default because at
>> >> the time of release some important pieces of software had not yet
>> >> migrated.
>> >>
>> >> You can switch by using PREFERRED_VERSION.
>> >>
>> >> Ross
>> >> On Thu, 13 Dec 2018 at 12:13, Vishwanath Chandapur <vishwavtu@gmail.com> wrote:
>> >> >
>> >> > Hi Team,
>> >> >
>> >> > Currently we are migrating to poly sumo version .
>> >> > But we have requirement to use 1.1.0 but poky is still supporting 1.0.2
>> >> >
>> >> > I would like know if latest OpenSSL available for future release .
>> >> >
>> >> > With Regard
>> >> > Vishwa
>> >> > _______________________________________________
>> >> > yocto-security mailing list
>> >> > yocto-security@yoctoproject.org
>> >> > https://lists.yoctoproject.org/listinfo/yocto-security
>
> --
> _______________________________________________
> yocto mailing list
> yocto@yoctoproject.org
> https://lists.yoctoproject.org/listinfo/yocto

Re: [yocto-security] Open ssl version

[Vishwanath Chandapur]

[-- Attachment #1: Type: text/plain, Size: 4289 bytes --]

I think issues is below part is missing in openssl_1.1.0i.bb file.

FILES_libcrypto = "${libdir}/libcrypto${SOLIBS}"

FILES_libssl = "${libdir}/libssl${SOLIBS}"

FILES_openssl-conf = "${sysconfdir}/ssl/openssl.cnf"

With Regards
Vishwa
On Thu, Dec 20, 2018 at 3:56 PM Alexander Kanavin <alex.kanavin@gmail.com>
wrote:

> It's likely that you ask bitbake to build something that has a hard
> dependency on openssl 1.0. Most probably openssh.
>
> Alex
>
> On Thu, 20 Dec 2018 at 05:30, Vishwanath Chandapur <vishwavtu@gmail.com>
> wrote:
> >
> > Hi Team,
> >
> > I have set opnessl version in sumo but getting below errors.
> >
> >
> > PREFERRED_VERSION_openssl = "1.1.0i"
> >
> >
> > Logs:
> >
> > NOTE: Resolving any missing task queue dependencies
> >
> > NOTE: preferred version 1.1.0i of openssl not available (for item libssl)
> > NOTE: versions of openssl available: 1.0.2p
> > NOTE: preferred version 1.1.0i of openssl not available (for item
> openssl10)
> > NOTE: versions of openssl available: 1.0.2p
> > NOTE: preferred version 1.1.0i of openssl not available (for item
> openssl-conf)
> > NOTE: versions of openssl available: 1.0.2p
> >
> >
> > ERROR: Multiple versions of openssl are due to be built
> (/home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/
> openssl_1.0.2p.bb
> /home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/
> openssl_1.1.0i.bb). Only one version of a given PN should be built in any
> given build. You likely need to set PREFERRED_VERSION_openssl to select the
> correct version or don't depend on multiple versions.
> >
> >
> > With Regards
> > Vishwa
> >
> > On Fri, Dec 14, 2018 at 5:31 PM Burton, Ross <ross.burton@intel.com>
> wrote:
> >>
> >> How did you set it?
> >>
> >> Also this isn't relevant to yocto-security, please move to yocto@.
> >>
> >> Ross
> >> On Fri, 14 Dec 2018 at 11:53, Vishwanath Chandapur <vishwavtu@gmail.com>
> wrote:
> >> >
> >> > Hi Ross,
> >> >
> >> > I tried to enable by using PREFERRED_VERSION.
> >> >
> >> > But getting these errors .
> >> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>
> >> > NOTE: Resolving any missing task queue dependencies
> >> > NOTE: preferred version 1.0.% of openssl not available (for item
> openssl)
> >> > NOTE: versions of openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of openssl-native not available (for
> item openssl-native)
> >> > NOTE: versions of openssl-native available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl)
> >> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of openssl not available (for item
> openssl-dev)
> >> > NOTE: versions of openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl-dev)
> >> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> >> > ERROR: Nothing RPROVIDES 'libssl
> >> > >>>>>>>>>>>>>>>>>>>>>>>>>>>
> >> >
> >> > With Regards
> >> > Vishwa
> >> >
> >> >
> >> > On Thu, 13 Dec 2018 at 5:57 PM, Burton, Ross <ross.burton@intel.com>
> wrote:
> >> >>
> >> >> Yes, Sumo has OpenSSL 1.1 but it isn't enabled by default because at
> >> >> the time of release some important pieces of software had not yet
> >> >> migrated.
> >> >>
> >> >> You can switch by using PREFERRED_VERSION.
> >> >>
> >> >> Ross
> >> >> On Thu, 13 Dec 2018 at 12:13, Vishwanath Chandapur <
> vishwavtu@gmail.com> wrote:
> >> >> >
> >> >> > Hi Team,
> >> >> >
> >> >> > Currently we are migrating to poly sumo version .
> >> >> > But we have requirement to use 1.1.0 but poky is still supporting
> 1.0.2
> >> >> >
> >> >> > I would like know if latest OpenSSL available for future release .
> >> >> >
> >> >> > With Regard
> >> >> > Vishwa
> >> >> > _______________________________________________
> >> >> > yocto-security mailing list
> >> >> > yocto-security@yoctoproject.org
> >> >> > https://lists.yoctoproject.org/listinfo/yocto-security
> >
> > --
> > _______________________________________________
> > yocto mailing list
> > yocto@yoctoproject.org
> > https://lists.yoctoproject.org/listinfo/yocto
>

[-- Attachment #2: Type: text/html, Size: 7401 bytes --]