Last update breaks build of Leap. Can someone please fix it?

Adam Majer (adamm) - almost 3 years ago

They use an OpenSSL function not available on Leap. I've submitted a request to add this function to our OpenSSL but this may take a few days or weeks.

Bug 1192489 - openssl: backport RSA_get0_pss_params() to 1.1.1d

In the meantime, one workaround is to revert the change that added usage of this one function. Is this sufficient for now?

---

Eric Schirra (ecsos) - almost 3 years ago

I have fixed it for me with add rsa-pss-revert.patch again.

---

Adam Majer (adamm) - almost 3 years ago

Sounds good. I will activate that patch for Leap on next version update. Should be in a day or two.

---

Andreas Schneider (gladiac) - almost 3 years ago

The best would be to use the revert patch as it makes it possible to build on more distributions not just the ones which get a backport.

40670.patch should be deleted. This blocks Factory submission.

Last changes from nodejs16 breaks building Leap packages. Where is the unresolved package openssl-has-RSA_get0_pss_params? Can someone fix build errror for Leap, please?

Please remove fedora build, it breaks dependency resolution

Adam Majer (adamm) - about 2 years ago

Fixed by project config

Would it be possible to build the package on Leap 15.6 as well? It would relax some constraints on the order of upgrades for us downstream.

Dominik Heidler (dheidler) - 4 months ago

Seems to fail

---

Manuel Jacob (mjacob) - 4 months ago

Maybe this is because 15.5 has openssl 1.1 by default and 15.6 has openssl 3 by default.

I tried building with changing the first line of the following block in the spec from %if 0%{?suse_version} >= 1500 to %if 0%{?suse_version} >= 1500 && 0%{?suse_version} < 1560:

%if 0%{?suse_version} >= 1500
BuildRequires:  openssl >= %{openssl_req_ver}
BuildRequires:  (libopenssl1_1-hmac if libopenssl-1_1-devel)
BuildRequires:  (libopenssl3-hmac if libopenssl-3-devel)
%else
BuildRequires:  openssl-1_1 >= %{openssl_req_ver}
BuildRequires:  libopenssl1_1-hmac
%endif

However, it does not seem to make a difference.