Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 329073 - dev-libs/openssl-0.9.8o-r1 fails to install in new slot
Summary: dev-libs/openssl-0.9.8o-r1 fails to install in new slot
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High normal
Assignee: Gentoo Linux bug wranglers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-07-20 08:52 UTC by roltel
Modified: 2010-07-20 12:14 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
build log for dev-libs/openssl-0.9.8o-r1 (build.log,318.74 KB, text/plain)
2010-07-20 08:54 UTC, roltel
Details

Note You need to log in before you can comment on or make changes to this bug.
Description roltel 2010-07-20 08:52:35 UTC
app-crypt/gnupg-2.0.16 is trying to pull in an older version of openssl in a new slot (dev-libs/openssl-0.9.8o-r1). Current version of openssl is dev-libs/openssl-1.0.0a. After successful compilation of the older openssl version, a file collision between both openssl versions is detected and installation is aborted.

Reproducible: Always

Steps to Reproduce:
1. Install current openssl version (dev-libs/openssl-1.0.0a)
2. Install current gnupg version (app-crypt/gnupg-2.0.16)
3. Older openssl version is being installed in new slot (dev-libs/openssl-0.9.8o-r1)
4. File collision is detected between both openssl versions.


Actual Results:  
>>> Installing (1 of 2) dev-libs/openssl-0.9.8o-r1
 * checking 2 files for package collisions
 * This package will overwrite one or more files that may belong to other
 * packages (see list below). You can use a command such as `portageq
 * owners / <filename>` to identify the installed package that owns a
 * file. If portageq reports that only one package owns a file then do
 * NOT file a bug report. A bug report is only useful if it identifies at
 * least two or more packages that are known to install the same file(s).
 * If a collision occurs and you can not explain where the file came from
 * then you should simply ignore the collision since there is not enough
 * information to determine if a real problem exists. Please do NOT file
 * a bug report at http://bugs.gentoo.org unless you report exactly which
 * two packages install the same file(s). Once again, please do NOT file
 * a bug report unless you have completely understood the above message.
 * 
 * Detected file collision(s):
 * 
 *      /usr/lib64/libssl.so.0.9.8
 *      /usr/lib64/libcrypto.so.0.9.8
 * 
 * Searching all installed packages for file collisions...
 * 
 * Press Ctrl-C to Stop
 * 
 * dev-libs/openssl-1.0.0a
 *      /usr/lib64/libcrypto.so.0.9.8
 *      /usr/lib64/libssl.so.0.9.8
 * 
 * Package 'dev-libs/openssl-0.9.8o-r1' NOT merged due to file
 * collisions. If necessary, refer to your elog messages for the whole
 * content of the above message.


Expected Results:  
dev-libs/openssl-0.9.8o-r1 installs into new slot without file collisions OR gnupg-2.0.16 depends on current openssl version and does not try to pull in older openssl version in new slot.
Comment 1 roltel 2010-07-20 08:54:37 UTC
Created attachment 239521 [details]
build log for dev-libs/openssl-0.9.8o-r1
Comment 2 Samuli Suominen (RETIRED) gentoo-dev 2010-07-20 11:30:07 UTC
gnupg doesn't depend on any openssl...
Comment 3 Samuli Suominen (RETIRED) gentoo-dev 2010-07-20 11:38:21 UTC
futhermore installation of 1.0.0a's postinst message tells you to run revdep-rebuild & manual deletion of the preserved libs...

but i've added a safe kludge in the ebuild now, fixing the file collision
Comment 4 roltel 2010-07-20 12:14:52 UTC
Sorry, you are right. There is no gnupg dependency. I was just puzzled why openssl needs to be downgraded and installed into a new slot???

I did run revdep-rebuild, but after that did not delete the old libraries as the comment said that "it should be safe to delete the old libraries". So I thought it was optional, and perhaps more safe to keep them in case there is still some program that relies on it.

Thank you for your quick support!!!