| Summary: | net-p2p/transmission-3.00-r1: assertion failed: handle != NULL w/ openssl-3.0.3 | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Michał Górny <mgorny> |
| Component: | Current packages | Assignee: | Mike Gilbert <floppym> |
| Status: | RESOLVED FIXED | ||
| Severity: | normal | CC: | sam |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | |||
| Bug Blocks: | 797325 | ||
| Attachments: | 0001-Switch-to-a-standalone-ARC4-implementation-1788.patch (rebased on 3.00) | ||
|
Description
Michał Górny
2022-05-15 06:38:20 UTC
Found it. Unfortunately, it's not a small patch: commit a459e5e11b2d2524b649f7487368de30c8d2af21 Author: Mike Gelfand <mikedld@users.noreply.github.com> Date: Sun Sep 12 06:47:29 2021 +0300 Switch to a standalone ARC4 implementation (#1788) * Switch to a standalone ARC4 implementation This frees us from expecting it being provided by one of the crypto libraries we support, all of which deprecated and/or removed it at this point. Fixes: #1103 Fixes: #1777 * Suppress lgtm warnings about RC4 being weak (we don't care) Created attachment 778997 [details, diff]
0001-Switch-to-a-standalone-ARC4-implementation-1788.patch (rebased on 3.00)
Here's a rebased patch. Apparently we also need the bundled ARC4 library. I can try to minimalize it (i.e. by replacing the big removals with #if 0) but I'm not sure if it wouldn't be better to just grab a snapshot at this point.
Not my decision but worth noting they're in the middle of a big c->c++ rewrite and don't seem to plan a release any time soon, so even if do take a snapshot, it won't be suitable for stabilisation :( https://github.com/transmission/transmission/discussions/2287 I meant a snapshot prior to the refactoring. Another possible solution would be to load the "legacy" provider via config or via a code patch. https://wiki.openssl.org/index.php/OpenSSL_3.0#Providers The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=49f3a2685d492f468e92e9d7fe1a72071163c726 commit 49f3a2685d492f468e92e9d7fe1a72071163c726 Author: Mike Gilbert <floppym@gentoo.org> AuthorDate: 2022-05-15 15:08:34 +0000 Commit: Mike Gilbert <floppym@gentoo.org> CommitDate: 2022-05-15 15:08:34 +0000 net-p2p/transmission: load openssl "legacy" provider Required for RC4. Closes: https://bugs.gentoo.org/844748 Signed-off-by: Mike Gilbert <floppym@gentoo.org> .../files/transmission-3.00-openssl-3.patch | 37 ++++++ net-p2p/transmission/transmission-3.00-r2.ebuild | 146 +++++++++++++++++++++ 2 files changed, 183 insertions(+) |