NetBSD Problem Report #46010

From www@NetBSD.org  Sun Feb 12 20:16:32 2012
Return-Path: <www@NetBSD.org>
Received: from mail.netbsd.org (mail.netbsd.org [149.20.53.66])
	by www.NetBSD.org (Postfix) with ESMTP id E29B263E00F
	for <gnats-bugs@gnats.NetBSD.org>; Sun, 12 Feb 2012 20:16:31 +0000 (UTC)
Message-Id: <20120212201630.C27C963B86B@www.NetBSD.org>
Date: Sun, 12 Feb 2012 20:16:30 +0000 (UTC)
From: slitvinov@gmail.com
Reply-To: slitvinov@gmail.com
To: gnats-bugs@NetBSD.org
Subject: [LINUX] package lang/python26 fails to install
X-Send-Pr-Version: www-1.0

>Number:         46010
>Category:       pkg
>Synopsis:       [LINUX] package lang/python26 fails to install
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    linux-pkg-people
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Feb 12 20:20:00 +0000 2012
>Closed-Date:    Wed Dec 17 08:49:54 +0000 2014
>Last-Modified:  Wed Dec 17 08:49:54 +0000 2014
>Originator:     Litvinov Sergey
>Release:        Ubuntu Linux
>Organization:
>Environment:
Linux desktop 3.0.0-15-generic #26-Ubuntu SMP Fri Jan 20 15:59:53 UTC 2012 i686 athlon i386 GNU/Linux
>Description:
Installation of lang/python26 fails because _ssl.so was not built.

==== from make log  ====
running install_egg_info
Writing //media/sdb2/src/pkgsrc/lang/python26/work/.destdir/home/vital303/netbsd/lib/python2.6/lib-dynload/Python-2.6.7-py2.6.egg-info
=> Automatic manual page handling
pkg_create: can't stat `/media/sdb2/src/pkgsrc/lang/python26/work/.destdir/home/vital303/netbsd/lib/python2.6/lib-dynload/_ssl.so'
===> Building binary package for python26-2.6.7nb1
=> Creating binary package /media/sdb2/src/pkgsrc/packages/All/python26-2.6.7nb1.tgz
pkg_create: can't stat `/media/sdb2/src/pkgsrc/lang/python26/work/.destdir/home/vital303/netbsd/lib/python2.6/lib-dynload/_ssl.so'
pkg_create: lstat failed for file lib/python2.6/lib-dynload/_ssl.so: No such file or directory
*** Error code 2

Stop.
bmake: stopped in /media/sdb2/src/pkgsrc/lang/python26
*** Error code 1

Stop.
bmake: stopped in /media/sdb2/src/pkgsrc/lang/python26
=================

From PKG_DEBUG_LEVEL=2 log
==== from make log ====
*** WARNING: renaming "_ssl" since importing it failed: build/lib.linux-i686-2.6/_ssl.so: undefined symbol: SSLv2_method

Failed to find the necessary bits to build these modules:
_tkinter           gdbm               linuxaudiodev   
ossaudiodev        sunaudiodev                        
To find the necessary bits, look in setup.py in detect_modules() for the module's name.


Failed to build these modules:
_ssl                                                  
=================

It seems Ubuntu version of openssl does not have a SSLv2_method.
http://stackoverflow.com/questions/8206546/undefined-symbol-sslv2-method

>How-To-Repeat:
bmake install
in
lang/python26 on Linux with no SSLv2_method in openssl.
>Fix:
I applied three local patches to remove SSLv2_method from Python. It
is not a patch proposal just an illustration.

$NetBSD$

--- Modules/_ssl.c.orig	2010-08-03 18:50:32.000000000 +0000
+++ Modules/_ssl.c
@@ -62,7 +62,6 @@ enum py_ssl_cert_requirements {
 };

 enum py_ssl_version {
-    PY_SSL_VERSION_SSL2,
     PY_SSL_VERSION_SSL3,
     PY_SSL_VERSION_SSL23,
     PY_SSL_VERSION_TLS1
@@ -302,8 +301,6 @@ newPySSLObject(PySocketSockObject *Sock,
         self->ctx = SSL_CTX_new(TLSv1_method()); /* Set up context */
     else if (proto_version == PY_SSL_VERSION_SSL3)
         self->ctx = SSL_CTX_new(SSLv3_method()); /* Set up context */
-    else if (proto_version == PY_SSL_VERSION_SSL2)
-        self->ctx = SSL_CTX_new(SSLv2_method()); /* Set up context */
     else if (proto_version == PY_SSL_VERSION_SSL23)
         self->ctx = SSL_CTX_new(SSLv23_method()); /* Set up context */
     PySSL_END_ALLOW_THREADS
@@ -1687,8 +1684,6 @@ init_ssl(void)
                             PY_SSL_CERT_REQUIRED);

     /* protocol versions */
-    PyModule_AddIntConstant(m, "PROTOCOL_SSLv2",
-                            PY_SSL_VERSION_SSL2);
     PyModule_AddIntConstant(m, "PROTOCOL_SSLv3",
                             PY_SSL_VERSION_SSL3);
     PyModule_AddIntConstant(m, "PROTOCOL_SSLv23",
$NetBSD$

--- Lib/test/test_ssl.py.orig	2010-08-02 19:56:05.000000000 +0000
+++ Lib/test/test_ssl.py
@@ -58,7 +58,6 @@ class BasicTests(unittest.TestCase):
                 raise

     def test_constants(self):
-        ssl.PROTOCOL_SSLv2
         ssl.PROTOCOL_SSLv23
         ssl.PROTOCOL_SSLv3
         ssl.PROTOCOL_TLSv1
@@ -829,19 +828,6 @@ else:
             bad_cert_test(os.path.join(os.path.dirname(__file__) or os.curdir,
                                        "badkey.pem"))

-        def test_protocol_sslv2(self):
-            """Connecting to an SSLv2 server with various client options"""
-            if test_support.verbose:
-                sys.stdout.write("\ntest_protocol_sslv2 disabled, "
-                                 "as it fails on OpenSSL 1.0.0+")
-            return
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv2, True)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv2, True, ssl.CERT_OPTIONAL)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv2, True, ssl.CERT_REQUIRED)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv23, True)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv3, False)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_TLSv1, False)
-
         def test_protocol_sslv23(self):
             """Connecting to an SSLv23 server with various client options"""
             if test_support.verbose:
@@ -877,7 +863,6 @@ else:
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv3, True)
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv3, True, ssl.CERT_OPTIONAL)
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv3, True, ssl.CERT_REQUIRED)
-            try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv2, False)
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv23, False)
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_TLSv1, False)

@@ -890,7 +875,6 @@ else:
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_TLSv1, True)
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_TLSv1, True, ssl.CERT_OPTIONAL)
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_TLSv1, True, ssl.CERT_REQUIRED)
-            try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_SSLv2, False)
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_SSLv3, False)
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_SSLv23, False)

$NetBSD$

--- Lib/ssl.py.orig	2010-04-27 22:05:18.000000000 +0000
+++ Lib/ssl.py
@@ -49,7 +49,6 @@ CERT_REQUIRED - certificates are require

 The following constants identify various SSL protocol variants:

-PROTOCOL_SSLv2
 PROTOCOL_SSLv3
 PROTOCOL_SSLv23
 PROTOCOL_TLSv1
@@ -61,7 +60,7 @@ import _ssl             # if we can't im

 from _ssl import SSLError
 from _ssl import CERT_NONE, CERT_OPTIONAL, CERT_REQUIRED
-from _ssl import PROTOCOL_SSLv2, PROTOCOL_SSLv3, PROTOCOL_SSLv23, PROTOCOL_TLSv1
+from _ssl import PROTOCOL_SSLv3, PROTOCOL_SSLv23, PROTOCOL_TLSv1
 from _ssl import RAND_status, RAND_egd, RAND_add
 from _ssl import \
      SSL_ERROR_ZERO_RETURN, \
@@ -406,8 +405,6 @@ def get_protocol_name(protocol_code):
         return "TLSv1"
     elif protocol_code == PROTOCOL_SSLv23:
         return "SSLv23"
-    elif protocol_code == PROTOCOL_SSLv2:
-        return "SSLv2"
     elif protocol_code == PROTOCOL_SSLv3:
         return "SSLv3"
     else:

>Release-Note:

>Audit-Trail:

Responsible-Changed-From-To: pkg-manager->linux-pkg-people
Responsible-Changed-By: wiz@NetBSD.org
Responsible-Changed-When: Mon, 13 Feb 2012 13:08:45 +0000
Responsible-Changed-Why:
Linux pkgsrc problem.


State-Changed-From-To: open->closed
State-Changed-By: obache@NetBSD.org
State-Changed-When: Wed, 17 Dec 2014 08:49:54 +0000
State-Changed-Why:
OPENSSL_NO_SSL2 is supported by python-2.6.9, (in pkgsrc, 2.6.8nb4).


>Unformatted:

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.39 2013/11/01 18:47:49 spz Exp $
$NetBSD: gnats_config.sh,v 1.8 2006/05/07 09:23:38 tsutsui Exp $
Copyright © 1994-2007 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.