[yocto] [yocto-security] Open ssl version

[Vishwanath Chandapur]

I think issues is below part is missing in openssl_1.1.0i.bb file.

FILES_libcrypto = "${libdir}/libcrypto${SOLIBS}"

FILES_libssl = "${libdir}/libssl${SOLIBS}"

FILES_openssl-conf = "${sysconfdir}/ssl/openssl.cnf"

With Regards
Vishwa
On Thu, Dec 20, 2018 at 3:56 PM Alexander Kanavin <alex.kanavin at gmail.com>
wrote:

> It's likely that you ask bitbake to build something that has a hard
> dependency on openssl 1.0. Most probably openssh.
>
> Alex
>
> On Thu, 20 Dec 2018 at 05:30, Vishwanath Chandapur <vishwavtu at gmail.com>
> wrote:
> >
> > Hi Team,
> >
> > I have set opnessl version in sumo but getting below errors.
> >
> >
> > PREFERRED_VERSION_openssl = "1.1.0i"
> >
> >
> > Logs:
> >
> > NOTE: Resolving any missing task queue dependencies
> >
> > NOTE: preferred version 1.1.0i of openssl not available (for item libssl)
> > NOTE: versions of openssl available: 1.0.2p
> > NOTE: preferred version 1.1.0i of openssl not available (for item
> openssl10)
> > NOTE: versions of openssl available: 1.0.2p
> > NOTE: preferred version 1.1.0i of openssl not available (for item
> openssl-conf)
> > NOTE: versions of openssl available: 1.0.2p
> >
> >
> > ERROR: Multiple versions of openssl are due to be built
> (/home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/
> openssl_1.0.2p.bb
> /home/ubuntu/workspace/yocto/sources/poky/meta/recipes-connectivity/openssl/
> openssl_1.1.0i.bb). Only one version of a given PN should be built in any
> given build. You likely need to set PREFERRED_VERSION_openssl to select the
> correct version or don't depend on multiple versions.
> >
> >
> > With Regards
> > Vishwa
> >
> > On Fri, Dec 14, 2018 at 5:31 PM Burton, Ross <ross.burton at intel.com>
> wrote:
> >>
> >> How did you set it?
> >>
> >> Also this isn't relevant to yocto-security, please move to yocto at .
> >>
> >> Ross
> >> On Fri, 14 Dec 2018 at 11:53, Vishwanath Chandapur <vishwavtu at gmail.com>
> wrote:
> >> >
> >> > Hi Ross,
> >> >
> >> > I tried to enable by using PREFERRED_VERSION.
> >> >
> >> > But getting these errors .
> >> > >>>>>>>>>>>>>>>>>>>>>>>>>>>>
> >> > NOTE: Resolving any missing task queue dependencies
> >> > NOTE: preferred version 1.0.% of openssl not available (for item
> openssl)
> >> > NOTE: versions of openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of openssl-native not available (for
> item openssl-native)
> >> > NOTE: versions of openssl-native available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl)
> >> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of openssl not available (for item
> openssl-dev)
> >> > NOTE: versions of openssl available: 1.1.0i
> >> > NOTE: preferred version 1.0.% of nativesdk-openssl not available (for
> item nativesdk-openssl-dev)
> >> > NOTE: versions of nativesdk-openssl available: 1.1.0i
> >> > ERROR: Nothing RPROVIDES 'libssl
> >> > >>>>>>>>>>>>>>>>>>>>>>>>>>>
> >> >
> >> > With Regards
> >> > Vishwa
> >> >
> >> >
> >> > On Thu, 13 Dec 2018 at 5:57 PM, Burton, Ross <ross.burton at intel.com>
> wrote:
> >> >>
> >> >> Yes, Sumo has OpenSSL 1.1 but it isn't enabled by default because at
> >> >> the time of release some important pieces of software had not yet
> >> >> migrated.
> >> >>
> >> >> You can switch by using PREFERRED_VERSION.
> >> >>
> >> >> Ross
> >> >> On Thu, 13 Dec 2018 at 12:13, Vishwanath Chandapur <
> vishwavtu at gmail.com> wrote:
> >> >> >
> >> >> > Hi Team,
> >> >> >
> >> >> > Currently we are migrating to poly sumo version .
> >> >> > But we have requirement to use 1.1.0 but poky is still supporting
> 1.0.2
> >> >> >
> >> >> > I would like know if latest OpenSSL available for future release .
> >> >> >
> >> >> > With Regard
> >> >> > Vishwa
> >> >> > _______________________________________________
> >> >> > yocto-security mailing list
> >> >> > yocto-security at yoctoproject.org
> >> >> > https://lists.yoctoproject.org/listinfo/yocto-security
> >
> > --
> > _______________________________________________
> > yocto mailing list
> > yocto at yoctoproject.org
> > https://lists.yoctoproject.org/listinfo/yocto
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.yoctoproject.org/pipermail/yocto/attachments/20181220/958d8e68/attachment.html>