[PATCH] ca-certificates: Fix openssl runtime dependency

[PATCH] ca-certificates: Fix openssl runtime dependency

[Andrei Gherzan]

Since yocto thud, and more specifically since poky switched to
openssl 1.1 line, the openssl binary is provided by 'openssl-bin'.

Signed-off-by: Andrei Gherzan <andrei@gherzan.ro>
---
 .../recipes-support/ca-certificates/ca-certificates_20190110.bb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb b/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
index 4c0425302f..bc69c55daa 100644
--- a/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
+++ b/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
@@ -82,6 +82,6 @@ do_install_append_class-native () {
     SYSROOT="${D}${base_prefix}" ${D}${sbindir}/update-ca-certificates
 }
 
-RDEPENDS_${PN} += "openssl"
+RDEPENDS_${PN} += "openssl-bin"
 
 BBCLASSEXTEND = "native nativesdk"
-- 
2.17.1

Re: [PATCH] ca-certificates: Fix openssl runtime dependency

[Richard Purdie]

On Tue, 2019-05-28 at 15:30 +0100, Andrei Gherzan wrote:
> Since yocto thud, and more specifically since poky switched to
> openssl 1.1 line, the openssl binary is provided by 'openssl-bin'.
> 
> Signed-off-by: Andrei Gherzan <andrei@gherzan.ro>
> ---
>  .../recipes-support/ca-certificates/ca-certificates_20190110.bb | 2
> +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/meta/recipes-support/ca-certificates/ca-
> certificates_20190110.bb b/meta/recipes-support/ca-certificates/ca-
> certificates_20190110.bb
> index 4c0425302f..bc69c55daa 100644
> --- a/meta/recipes-support/ca-certificates/ca-
> certificates_20190110.bb
> +++ b/meta/recipes-support/ca-certificates/ca-
> certificates_20190110.bb
> @@ -82,6 +82,6 @@ do_install_append_class-native () {
>      SYSROOT="${D}${base_prefix}" ${D}${sbindir}/update-ca-
> certificates
>  }
>  
> -RDEPENDS_${PN} += "openssl"
> +RDEPENDS_${PN} += "openssl-bin"

Doesn't work for ca-certificates-native:

https://autobuilder.yoctoproject.org/typhoon/#/builders/39/builds/638
[amongst many other failures]


Cheers,

Richard

Re: [PATCH] ca-certificates: Fix openssl runtime dependency

[Peter Kjellerstedt]

> -----Original Message-----
> From: openembedded-core-bounces@lists.openembedded.org <openembedded-core-bounces@lists.openembedded.org> On Behalf Of Richard Purdie
> Sent: den 29 maj 2019 01:24
> To: Andrei Gherzan <andrei@gherzan.ro>; openembedded-core@lists.openembedded.org
> Subject: Re: [OE-core] [PATCH] ca-certificates: Fix openssl runtime dependency
> 
> On Tue, 2019-05-28 at 15:30 +0100, Andrei Gherzan wrote:
> > Since yocto thud, and more specifically since poky switched to
> > openssl 1.1 line, the openssl binary is provided by 'openssl-bin'.
> >
> > Signed-off-by: Andrei Gherzan <andrei@gherzan.ro>
> > ---
> >  .../recipes-support/ca-certificates/ca-certificates_20190110.bb | 2 +-
> >  1 file changed, 1 insertion(+), 1 deletion(-)
> >
> > diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb b/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
> > index 4c0425302f..bc69c55daa 100644
> > --- a/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
> > +++ b/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
> > @@ -82,6 +82,6 @@ do_install_append_class-native () {
> >      SYSROOT="${D}${base_prefix}" ${D}${sbindir}/update-ca-certificates
> >  }
> >
> > -RDEPENDS_${PN} += "openssl"
> > +RDEPENDS_${PN} += "openssl-bin"
> 
> Doesn't work for ca-certificates-native:
> 
> https://autobuilder.yoctoproject.org/typhoon/#/builders/39/builds/638
> [amongst many other failures]

I assume the above can be fixed by instead using:

RDEPENDS_${PN}_append_class-target = " openssl-bin"

However, has there been any attempts at rectifying the situation where 
runtime dependencies on packages are turned into recipe dependencies 
for the native version of a recipe, which obviously does not work when 
the package name does not match a recipe name?

> Cheers,
> 
> Richard

//Peter

Re: [PATCH] ca-certificates: Fix openssl runtime dependency

[Andrei Gherzan]

On 29/05/2019 15.29, Peter Kjellerstedt wrote:
>> -----Original Message-----
>> From: openembedded-core-bounces@lists.openembedded.org <openembedded-core-bounces@lists.openembedded.org> On Behalf Of Richard Purdie
>> Sent: den 29 maj 2019 01:24
>> To: Andrei Gherzan <andrei@gherzan.ro>; openembedded-core@lists.openembedded.org
>> Subject: Re: [OE-core] [PATCH] ca-certificates: Fix openssl runtime dependency
>>
>> On Tue, 2019-05-28 at 15:30 +0100, Andrei Gherzan wrote:
>>> Since yocto thud, and more specifically since poky switched to
>>> openssl 1.1 line, the openssl binary is provided by 'openssl-bin'.
>>>
>>> Signed-off-by: Andrei Gherzan <andrei@gherzan.ro>
>>> ---
>>>  .../recipes-support/ca-certificates/ca-certificates_20190110.bb | 2 +-
>>>  1 file changed, 1 insertion(+), 1 deletion(-)
>>>
>>> diff --git a/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb b/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
>>> index 4c0425302f..bc69c55daa 100644
>>> --- a/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
>>> +++ b/meta/recipes-support/ca-certificates/ca-certificates_20190110.bb
>>> @@ -82,6 +82,6 @@ do_install_append_class-native () {
>>>      SYSROOT="${D}${base_prefix}" ${D}${sbindir}/update-ca-certificates
>>>  }
>>>
>>> -RDEPENDS_${PN} += "openssl"
>>> +RDEPENDS_${PN} += "openssl-bin"
>> Doesn't work for ca-certificates-native:
>>
>> https://autobuilder.yoctoproject.org/typhoon/#/builders/39/builds/638
>> [amongst many other failures]
Fixed native and nativesdk in a V2 that I just pushed. Made them
explicit RDEPENDS .
> I assume the above can be fixed by instead using:
>
> RDEPENDS_${PN}_append_class-target = " openssl-bin"
>
> However, has there been any attempts at rectifying the situation where 
> runtime dependencies on packages are turned into recipe dependencies 
> for the native version of a recipe, which obviously does not work when 
> the package name does not match a recipe name?
-- 

Andrei Gherzan
gpg: rsa4096/D4D94F67AD0E9640 | t: @agherzan

Re: [PATCH] ca-certificates: Fix openssl runtime dependency

[richard.purdie]

On Wed, 2019-05-29 at 14:29 +0000, Peter Kjellerstedt wrote:
> I assume the above can be fixed by instead using:
> 
> RDEPENDS_${PN}_append_class-target = " openssl-bin"
> 
> However, has there been any attempts at rectifying the situation
> where 
> runtime dependencies on packages are turned into recipe dependencies 
> for the native version of a recipe, which obviously does not work
> when the package name does not match a recipe name?

There is an open bug:

https://bugzilla.yoctoproject.org/show_bug.cgi?id=13355

Its rather difficult to fix. I'd documented the real underlying problem
in there (XXX-native vs nativesdk-XXX naming). There is an email from
me in the archives somewhere from years ago arguing why we had to have
nativesdk-XXX even though everyone preferred XXX-nativesdk.

Cheers,

Richard