Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 842858 - sys-kernel/vanilla-kernel - missing dependency on dev-libs/openssl
Summary: sys-kernel/vanilla-kernel - missing dependency on dev-libs/openssl
Status: CONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Distribution Kernel Project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-05-06 04:30 UTC by Mike Gilbert
Modified: 2022-05-06 18:06 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Mike Gilbert gentoo-dev 2022-05-06 04:30:29 UTC
After upgrading from openssl-1.1.x to openssl-3.x, I get the following preserved libs:

!!! existing preserved libs:
>>> package: dev-libs/openssl-3.0.3
 *  - /usr/lib64/libcrypto.so.1.1
 *      used by /usr/src/linux-5.15.36-dist/scripts/extract-cert (sys-kernel/vanilla-kernel-5.15.36)
 *      used by /usr/src/linux-5.15.37-dist/scripts/extract-cert (sys-kernel/vanilla-kernel-5.15.37)
Comment 1 Mike Gilbert gentoo-dev 2022-05-06 18:01:59 UTC
A couple possible solutions:

1. Disable CONFIG_SYSTEM_TRUSTED_KEYRING and CONFIG_SYSTEM_REVOCATION_LIST by default. This would prevent extract-cert from being built.

2. Add the necessary dependencies to kernel-build.eclass and kernel-install.eclass.

kernel-build.eclass:

BDEPEND="dev-libs/openssl:0"

kernel-install.eclass:

RDEPEND="dev-libs/openssl:0="

The RDEPEND setting is technically incorrect if we are cross-compiling. A possible alternative would be to remove the "extract-cert" binary from the installation image.