Summary: | sys-kernel/vanilla-kernel - missing dependency on dev-libs/openssl | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Mike Gilbert <floppym> |
Component: | Current packages | Assignee: | Distribution Kernel Project <dist-kernel> |
Status: | CONFIRMED --- | ||
Severity: | normal | ||
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
A couple possible solutions: 1. Disable CONFIG_SYSTEM_TRUSTED_KEYRING and CONFIG_SYSTEM_REVOCATION_LIST by default. This would prevent extract-cert from being built. 2. Add the necessary dependencies to kernel-build.eclass and kernel-install.eclass. kernel-build.eclass: BDEPEND="dev-libs/openssl:0" kernel-install.eclass: RDEPEND="dev-libs/openssl:0=" The RDEPEND setting is technically incorrect if we are cross-compiling. A possible alternative would be to remove the "extract-cert" binary from the installation image. |
After upgrading from openssl-1.1.x to openssl-3.x, I get the following preserved libs: !!! existing preserved libs: >>> package: dev-libs/openssl-3.0.3 * - /usr/lib64/libcrypto.so.1.1 * used by /usr/src/linux-5.15.36-dist/scripts/extract-cert (sys-kernel/vanilla-kernel-5.15.36) * used by /usr/src/linux-5.15.37-dist/scripts/extract-cert (sys-kernel/vanilla-kernel-5.15.37)