Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 128922 - patch to reenable missing ciphers in kde-base/kdelibs-3.5.2
Summary: patch to reenable missing ciphers in kde-base/kdelibs-3.5.2
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] KDE (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo KDE team
URL: http://bugs.kde.org/show_bug.cgi?id=1...
Whiteboard:
Keywords:
: 131558 225083 (view as bug list)
Depends on:
Blocks:
 
Reported: 2006-04-05 08:19 UTC by Raymond Lewis Rebbeck
Modified: 2009-06-02 16:22 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Patch to reenable the missing ciphers (kdelibs-3.5.2-kssl-3des.patch,646 bytes, patch)
2006-04-05 08:20 UTC, Raymond Lewis Rebbeck
Details | Diff
Patch for kdelibs-3.5.2.ebuild (kdelibs-3.5.2.ebuild.patch,394 bytes, patch)
2006-04-05 08:20 UTC, Raymond Lewis Rebbeck
Details | Diff
Patch for kdelibs-3.5.4.ebuild (kdelibs-3.5.4-kssl-3des.patch,622 bytes, patch)
2006-08-05 05:35 UTC, Rick Harris
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Raymond Lewis Rebbeck 2006-04-05 08:19:40 UTC
As of kde 3.5.2 some ciphers have been deprecated and removed from kde which may result in breakage of websites which require these ciphers.

Example and discussion at the kde bug report: http://bugs.kde.org/show_bug.cgi?id=124684

Attached is a patch against kdelibs-3.5.2 that reenables the disabled ciphers allowing such sites to work again and also a patch to the ebuild which applies the patch.

I don't know how the gentoo kde maintainers feel about this issue, but a patch and discussion are here in case it is felt to be important enough to be included in portage. Upstream appears to have no intention to enable the ciphers again as including these ciphers apparently breaks other websites as well.
Comment 1 Raymond Lewis Rebbeck 2006-04-05 08:20:18 UTC
Created attachment 83986 [details, diff]
Patch to reenable the missing ciphers
Comment 2 Raymond Lewis Rebbeck 2006-04-05 08:20:54 UTC
Created attachment 83987 [details, diff]
Patch for kdelibs-3.5.2.ebuild
Comment 3 Carsten Lohrke (RETIRED) gentoo-dev 2006-04-20 09:03:48 UTC
Following upstream as enabling some sites to break others is a loose - loose situation. Sorry.
Comment 4 Carsten Lohrke (RETIRED) gentoo-dev 2006-04-28 05:28:01 UTC
*** Bug 131558 has been marked as a duplicate of this bug. ***
Comment 5 Rick Harris 2006-04-28 17:24:49 UTC
So the situation is:
1. Re-enable the cipher & break some websites. This is yet to be proven, only one example site given which does in fact work with the cipher re-enabled !!

2. Follow upstream & lock out an entire country from accessing government/financial institutions secure websites.

3. Allow the users to decide via a USE flag.

Carsten, could we please have a 'legacyssl' USE flag that applies this patch so that users may decide for themselves whether Konqueror should be broken or not for their situation.

I re-iterate, this decision has left the Australian Linux community out in the cold with all Australian Konqueror users unable to access government and financial institution's secure websites.
Comment 6 Carsten Lohrke (RETIRED) gentoo-dev 2006-05-01 08:17:12 UTC
(In reply to comment #5)
> Carsten, could we please have a 'legacyssl' USE flag that applies this patch so
> that users may decide for themselves whether Konqueror should be broken or not
> for their situation.

O.k. I have done so, but can't say I'm fond of it.
Comment 7 Carsten Lohrke (RETIRED) gentoo-dev 2006-05-01 08:19:08 UTC
That said: I do not maintain the patch, no matter how trivial it is. If the code changes in a later KDE version and you don't come up with a revised one, it's gone.
Comment 8 Rick Harris 2006-05-04 18:32:56 UTC
Many thanks, I'll ensure the patch is maintained & revised if necessary.
Comment 9 Rick Harris 2006-08-05 05:35:14 UTC
Created attachment 93499 [details, diff]
Patch for kdelibs-3.5.4.ebuild

Patch updated to apply cleanly to kdelibs-3.5.4
Comment 10 Anton Bolshakov 2009-06-02 16:22:26 UTC
*** Bug 225083 has been marked as a duplicate of this bug. ***