From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from gecko.sbs.de (gecko.sbs.de [194.138.37.40]) by mail.openembedded.org (Postfix) with ESMTP id 7554A60269 for ; Mon, 9 Jul 2018 12:06:51 +0000 (UTC) Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by gecko.sbs.de (8.15.2/8.15.2) with ESMTPS id w69C6iDB004547 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Mon, 9 Jul 2018 14:06:44 +0200 Received: from [192.168.253.100] ([163.242.57.90]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id w69C6gnj018226; Mon, 9 Jul 2018 14:06:42 +0200 References: <20180608140403.27855-1-andrej.valek@siemens.com> <20180611133005.27521-3-andrej.valek@siemens.com> To: Alexander Kanavin From: Andrej Valek Openpgp: preference=signencrypt Autocrypt: addr=andrej.valek@siemens.com; prefer-encrypt=mutual; keydata= xsBNBFkSzTcBCADSJTRk7YudjxZ/ma2IXPV4Y5gkACJKDOYAZcRqNjDbIFUmc7ck3KeuUGKy ifrpWD6/7YPXbixv4sAlFly6sNL31agVHLO4BCCE77DaZ2smiN0JaLYzmMdr0BPLMsL96nBO UDo8o2a1NwU+GpD8a0/vcovro+NgLvfk9xP4rYAve09VYvF4DbQNW9Y+8reqWFnBI8EN5Fps vPCUr/TSuxk3VpU//8QtP7WqyRA31qiWFDxE2dqSnrpUBojxQMY94tDP7kjQtzD2ZpaDt1oL PDE/n6qtYG792JVvNjuo1QpfPo8a8I4HvMmbh/Orv0fniauB229OaWNPp27ln55xG8FvABEB AAHNJ0FuZHJlaiBWYWxlayA8YW5kcmVqLnZhbGVrQHNpZW1lbnMuY29tPsLAfgQTAQIAKAUC WRLNNwIbAwUJA8JnAAYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AACgkQ3npj5PmioO8DZQgA ibpOwfxDw3qlSEHDE395Tf+bEAYWjjNz9OQB4nnhq1Ql9jbUhfQQk/equaxoIfNHyLNDbeUU 8ULLXJS+nDRi13yf2w/9L386fd5V63cdP6no2dpnEhwOKV1miiUtvcjDCe3bjm7WHVfg9OsF 4AWox+/GR6sGJHRestHeXIJthmru8dB57oKy2fPgPpY1Ld1Wwb4okZgIi+1sKx19fk2xX9lc KpdvCXx+6FB3a9+sJTmb12meeGtKWC7BeElM2sG5NK7yx9zFNqSRebilwNankSE0QzWwmu4M bW6OTuxv/3qeHIvFH3EhrEmnd68Zm4+/jx2ZN5Ax23ZaGD8pabuO587ATQRZEs03AQgA0oCu faa9qlV0iYK+XlLcW6u55/o5psqtwoUCo8u18v8j4qB80r9latFKsO/SOjhVOYgIuzTTftQs Di71i9GJwK8Kk2FMo0YuJ9J9xdcvmjUI2vNUbOcaz2V0tRC9P/P5UaIltQAMVxbFHDwj17UA 7YpEUL3ixxMs/usIKKGA+jIvsBdcn1WFji/NXLffwQ+zrAoT3q8EuGn4jSdROND16e9ynKgk D5D+EoA5RoFi8y3tRHJsi/dNlaUISsQOux/MgXsk1UU2lkmq7uxddRw8xwzG5dhx79sQp4Dt YpSfZBylD3DnCTg3ajdWCHGVyBdMLVncfj8sPDsVkCozTaSqFwARAQABwsBlBBgBAgAPBQJZ Es03AhsMBQkDwmcAAAoJEN56Y+T5oqDv8EEH/0qUECI1OpJS5R9Di9yc6YOfyNdCFHJ5rnUx dTr5+U3z30HBpzv1yPtO0fRQPulFRp2T81nhzT07B6Jce/pPUPE4QUVuwkM80KUbveJSNVHH Vp+9MGHEmpSevVHGKwzr+/7n5KJd5+SX3Y0mFxbu7GUZTMvM9Ra/p7lu0DsAH1CgEzKf3KTx FrUN9oSYETbN3l6+pxO3RYAxtCVRMCOCJ7skHkfPH0ADxsbecaKo2CHqcDJigqZBKxjnWYsm 0+8mRhIQs3JuF0z7hKJGRacdGvKdQbCo0swLT9NVWU0IcUc/gwsCzQu/0Iml1x6MbgameiX4 emYHzsJ3+vLapH+kAEI= Message-ID: Date: Mon, 9 Jul 2018 14:06:43 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 MIME-Version: 1.0 In-Reply-To: <20180611133005.27521-3-andrej.valek@siemens.com> Cc: "openembedded-core@lists.openembedded.org" Subject: Re: [PATCH v4 3/3] openssl-1.1: /etc/ssl location compatibility X-BeenThere: openembedded-core@lists.openembedded.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Patches and discussions about the oe-core layer List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Jul 2018 12:06:51 -0000 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Hi Alex, What is the current status of this upgrade? Are there still some open points? Cheers, Andrej On 06/11/18 15:30, Andrej Valek wrote: > Some packages have hard-coded path to /etc/ssl location. > Create a symlinks to correct location. > > Signed-off-by: Andrej Valek > Signed-off-by: Marko Peter > --- > meta/recipes-connectivity/openssl/openssl_1.1.0h.bb | 18 +++++++++++++++--- > 1 file changed, 15 insertions(+), 3 deletions(-) > > diff --git a/meta/recipes-connectivity/openssl/openssl_1.1.0h.bb b/meta/recipes-connectivity/openssl/openssl_1.1.0h.bb > index df05f3a2b7..487219b600 100644 > --- a/meta/recipes-connectivity/openssl/openssl_1.1.0h.bb > +++ b/meta/recipes-connectivity/openssl/openssl_1.1.0h.bb > @@ -22,7 +22,7 @@ SRC_URI = "http://www.openssl.org/source/openssl-${PV}.tar.gz \ > > S = "${WORKDIR}/openssl-${PV}" > > -inherit lib_package multilib_header ptest > +inherit lib_package multilib_header ptest relative_symlinks > > do_configure () { > os=${HOST_OS} > @@ -133,6 +133,18 @@ EXTRA_OECONF_libc-musl += "-DOPENSSL_NO_ASYNC" > do_install () { > oe_runmake DESTDIR="${D}" MANDIR="${mandir}" MANSUFFIX=ssl install > oe_multilib_header openssl/opensslconf.h > + > + # Create SSL structure for PATH hard-coded packages like ca-certificates > + # Debian is also using this technique > + install -d ${D}${sysconfdir}/ssl/ > + mv ${D}${libdir}/ssl-1.1/openssl.cnf \ > + ${D}${libdir}/ssl-1.1/certs \ > + ${D}${libdir}/ssl-1.1/private \ > + \ > + ${D}${sysconfdir}/ssl/ > + ln -sf ${sysconfdir}/ssl/certs ${D}${libdir}/ssl-1.1/certs > + ln -sf ${sysconfdir}/ssl/private ${D}${libdir}/ssl-1.1/private > + ln -sf ${sysconfdir}/ssl/openssl.cnf ${D}${libdir}/ssl-1.1/openssl.cnf > } > > do_install_append_class-native () { > @@ -163,6 +175,6 @@ FILES_${PN} =+ " ${libdir}/ssl-1.1/*" > FILES_${PN}-misc = "${libdir}/ssl-1.1/misc" > RDEPENDS_${PN}-misc = "${@bb.utils.filter('PACKAGECONFIG', 'perl', d)}" > FILES_${PN}-engines = "${libdir}/engines-1.1" > -FILES_openssl-conf = "${libdir}/ssl-1.1/openssl.cnf" > -CONFFILES_openssl-conf = "${libdir}/ssl-1.1/openssl.cnf" > +FILES_openssl-conf = "${sysconfdir}/ssl/openssl.cnf ${libdir}/ssl-1.1/openssl.cnf" > +CONFFILES_openssl-conf = "${sysconfdir}/ssl/openssl.cnf" > RRECOMMENDS_libcrypto += "openssl-conf" >