Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 744934 - net-misc/curl-7.72.0: automagic on dev-libs/openssl[sslv3] causing revdep build failures
Summary: net-misc/curl-7.72.0: automagic on dev-libs/openssl[sslv3] causing revdep bui...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Anthony Basile
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-09-27 06:25 UTC by Andreas Sturmlechner
Modified: 2021-02-13 15:13 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Sturmlechner gentoo-dev 2020-09-27 06:25:43 UTC
This can be reproduced by:

- Build dev-libs/openssl w/ USE=sslv3
- Build net-misc/curl
- Rebuild dev-libs/openssl w/o USE=sslv3

From LibreOffice:

/usr/lib/gcc/x86_64-pc-linux-gnu/10.2.0/../../../../x86_64-pc-linux-gnu/bin/ld: /usr/lib64/libcurl.so.4: undefined reference to `SSLv3_client_method@OPENSSL_1_1_0'
collect2: error: ld returned 1 exit status
make[1]: *** [/usr/src/portage/app-office/libreoffice-6.4.6.2-r2/work/libreoffice-6.4.6.2/svx/Executable_gengal.mk:20: /usr/src/portage/app-office/libreoffice-6.4.6.2-r2/work/libreoffice-6.4.6.2/instdir/program/gengal.bin] Error 1
/usr/lib/gcc/x86_64-pc-linux-gnu/10.2.0/../../../../x86_64-pc-linux-gnu/bin/ld: /usr/lib64/libcurl.so.4: undefined reference to `SSLv3_client_method@OPENSSL_1_1_0'
collect2: error: ld returned 1 exit status
make[1]: *** [/usr/src/portage/app-office/libreoffice-6.4.6.2-r2/work/libreoffice-6.4.6.2/solenv/gbuild/LinkTarget.mk:639: /usr/src/portage/app-office/libreoffice-6.4.6.2-r2/work/libreoffice-6.4.6.2/workdir/LinkTarget/Executable/canvasdemo] Error 1

From CMake:

/usr/lib/gcc/x86_64-pc-linux-gnu/10.2.0/../../../../x86_64-pc-linux-gnu/bin/ld: /usr/lib64/libcurl.so: undefined reference to `SSLv3_client_method@OPENSSL_1_1_0'
collect2: error: ld returned 1 exit status
make[2]: *** [Source/CursesDialog/CMakeFiles/ccmake.dir/build.make:311: bin/ccmake] Error 1
Comment 1 Anthony Basile gentoo-dev 2021-01-29 20:27:24 UTC
This should be fixed in curl-7.74.0-r3.ebuild.  Can you please check and close this bug if it works.
Comment 2 Andreas Sturmlechner gentoo-dev 2021-01-29 20:46:17 UTC
So your fix does this:

-dev-libs/openssl:0=[static-libs?,${MULTILIB_USEDEP}]
+dev-libs/openssl:0=[sslv3,static-libs?,${MULTILIB_USEDEP}]

But the right thing to do would be either:

a)
>  IUSE=sslv3
>  dev-libs/openssl:0=[sslv3=,static-libs?,${MULTILIB_USEDEP}]
b) hard-disable sslv3 in the build system

with b) probably the preferable solution.
Comment 3 Andreas Sturmlechner gentoo-dev 2021-01-29 21:09:24 UTC
(see also use flag description: sslv3: Support for the old/insecure SSLv3 protocol)
Comment 4 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2021-01-29 23:22:16 UTC
I'm going to revert this commit as it is the exact opposite of a fix -- it turns a fringe problem into a problem affecting all Gentoo users who will get the stupid Portage autounmask to enable sslv3 for them.
Comment 5 Larry the Git Cow gentoo-dev 2021-01-29 23:24:07 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0e357e57cc8971a965204eb97eef59518958c8d3

commit 0e357e57cc8971a965204eb97eef59518958c8d3
Author:     Michał Górny <mgorny@gentoo.org>
AuthorDate: 2021-01-29 23:22:27 +0000
Commit:     Michał Górny <mgorny@gentoo.org>
CommitDate: 2021-01-29 23:24:03 +0000

    net-misc/curl: [QA] Revert "remove libressl, fix bugs #744934..."
    
    This does not fix the problem, this forcibly exposes all Gentoo users
    to it in the future.
    
    Reverts: 8b6375b9b783eb0d412f78bb45a50675591729fe
    Bug: https://bugs.gentoo.org/744934
    Signed-off-by: Michał Górny <mgorny@gentoo.org>

 net-misc/curl/curl-7.74.0-r3.ebuild | 285 ------------------------------------
 1 file changed, 285 deletions(-)
Comment 6 Anthony Basile gentoo-dev 2021-01-30 00:56:37 UTC

> b) hard-disable sslv3 in the build system
> 
> with b) probably the preferable solution.

I'm not sure what you mean here.
Comment 7 Anthony Basile gentoo-dev 2021-01-30 01:05:34 UTC
(In reply to Anthony Basile from comment #6)
> 
> > b) hard-disable sslv3 in the build system
> > 
> > with b) probably the preferable solution.
> 
> I'm not sure what you mean here.

In speaking with mgorny, the idea is to disable sslv3 in configure.
Comment 8 Anthony Basile gentoo-dev 2021-02-08 16:16:30 UTC
I went with the USE flag to keep consistency across a persons system.  Reopen if you feel there is still a problem.