[bug#29476] [PATCH] gnu: libressl: Update to 2.6.3.

[bug#29476] [PATCH] gnu: libressl: Update to 2.6.3.

[Rutger Helling]

[-- Attachment #1.1: Type: text/plain, Size: 30 bytes --]

Here's an update for LibreSSL.

[-- Attachment #1.2: Type: text/html, Size: 217 bytes --]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: 0001-gnu-libressl-Update-to-2.6.3.patch --]
[-- Type: text/x-diff; name=0001-gnu-libressl-Update-to-2.6.3.patch, Size: 1472 bytes --]

From 0319e59618578864faf6ac1402bb02eca9e6adb7 Mon Sep 17 00:00:00 2001
From: Rutger Helling <rhelling@mykolab.com>
Date: Mon, 27 Nov 2017 19:57:53 +0100
Subject: [PATCH] gnu: libressl: Update to 2.6.3.

* gnu/packages/tls.scm (libressl): Update to 2.6.3.
---
 gnu/packages/tls.scm | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm
index 595524506..23b5cc993 100644
--- a/gnu/packages/tls.scm
+++ b/gnu/packages/tls.scm
@@ -10,6 +10,7 @@
 ;;; Copyright © 2016 Hartmut Goebel <h.goebel@crazy-compilers.com>
 ;;; Copyright © 2017 Ricardo Wurmus <rekado@elephly.net>
 ;;; Copyright © 2017 Marius Bakke <mbakke@fastmail.com>
+;;; Copyright © 2017 Rutger Helling <rhelling@mykolab.com>
 ;;;
 ;;; This file is part of GNU Guix.
 ;;;
@@ -484,14 +485,14 @@ required structures.")
 (define-public libressl
   (package
     (name "libressl")
-    (version "2.5.5")
+    (version "2.6.3")
     (source (origin
               (method url-fetch)
               (uri (string-append "mirror://openbsd/LibreSSL/"
                                   name "-" version ".tar.gz"))
               (sha256
                (base32
-                "1i77viqy1afvbr392npk9v54k9zhr9zq2vhv6pliza22b0ymwzz5"))))
+                "162wgzmg4zzqj5cxrsrmkfv1623dc4g8h3fsf1lvjw9i4sc6bbdf"))))
     (build-system gnu-build-system)
     (arguments
      ;; Do as if 'getentropy' was missing since older Linux kernels lack it
-- 
2.15.0

[bug#29476] [PATCH] gnu: libressl: Update to 2.6.3.

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 712 bytes --]

On Mon, Nov 27, 2017 at 08:04:21PM +0100, Rutger Helling wrote:
> Here's an update for LibreSSL.

> From 0319e59618578864faf6ac1402bb02eca9e6adb7 Mon Sep 17 00:00:00 2001
> From: Rutger Helling <rhelling@mykolab.com>
> Date: Mon, 27 Nov 2017 19:57:53 +0100
> Subject: [PATCH] gnu: libressl: Update to 2.6.3.
> 
> * gnu/packages/tls.scm (libressl): Update to 2.6.3.

Thanks for paying attention to this!

I tried this update recently and found that OpenSSH is not yet
compatible with the 2.6 series of LibreSSL.

My understanding is that the 2.5 series is still supported upstream, so
I think we should stick with that until LibreSSL-native software like
OpenSSH is ready.

What do you think?

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[bug#29476] [PATCH] gnu: libressl: Update to 2.6.3.

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 1275 bytes --]

On Mon, Nov 27, 2017 at 02:21:10PM -0500, Leo Famulari wrote:
> On Mon, Nov 27, 2017 at 08:04:21PM +0100, Rutger Helling wrote:
> > Here's an update for LibreSSL.
> 
> > From 0319e59618578864faf6ac1402bb02eca9e6adb7 Mon Sep 17 00:00:00 2001
> > From: Rutger Helling <rhelling@mykolab.com>
> > Date: Mon, 27 Nov 2017 19:57:53 +0100
> > Subject: [PATCH] gnu: libressl: Update to 2.6.3.
> > 
> > * gnu/packages/tls.scm (libressl): Update to 2.6.3.
> 
> Thanks for paying attention to this!
> 
> I tried this update recently and found that OpenSSH is not yet
> compatible with the 2.6 series of LibreSSL.

I remembered incorrectly!

The issue I had is that Python 3.5.3 is not compatible with LibreSSL
2.6, but only 2.5; I use an OpenSSH with a LibreSSL-only dependency
graph.

OpenSSH itself builds fine with LibreSSL 2.6, although it does not
support OpenSSL 1.1. It's likely that once OpenSSL 1.0.2 is retired, the
portable OpenSSH will require LibreSSL, unless someone contributes
support for the new OpenSSL API to OpenSSH.

Well, we don't claim to support replacing OpenSSL with LibreSSL, and
Python is not developed against LibreSSL, so I guess there is no good
reason to delay this update.

Thoughts? I'll push if there are no objections.

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[bug#29476] [PATCH] gnu: libressl: Update to 2.6.3.

[Ludovic Courtès]

Leo Famulari <leo@famulari.name> skribis:

> The issue I had is that Python 3.5.3 is not compatible with LibreSSL
> 2.6, but only 2.5; I use an OpenSSH with a LibreSSL-only dependency
> graph.
>
> OpenSSH itself builds fine with LibreSSL 2.6, although it does not
> support OpenSSL 1.1. It's likely that once OpenSSL 1.0.2 is retired, the
> portable OpenSSH will require LibreSSL, unless someone contributes
> support for the new OpenSSL API to OpenSSH.
>
> Well, we don't claim to support replacing OpenSSL with LibreSSL, and
> Python is not developed against LibreSSL, so I guess there is no good
> reason to delay this update.
>
> Thoughts? I'll push if there are no objections.

Sounds good to me!

Ludo’.

bug#29476: [PATCH] gnu: libressl: Update to 2.6.3.

[Leo Famulari]

[-- Attachment #1: Type: text/plain, Size: 883 bytes --]

On Tue, Nov 28, 2017 at 11:28:43AM +0100, Ludovic Courtès wrote:
> Leo Famulari <leo@famulari.name> skribis:
> 
> > The issue I had is that Python 3.5.3 is not compatible with LibreSSL
> > 2.6, but only 2.5; I use an OpenSSH with a LibreSSL-only dependency
> > graph.
> >
> > OpenSSH itself builds fine with LibreSSL 2.6, although it does not
> > support OpenSSL 1.1. It's likely that once OpenSSL 1.0.2 is retired, the
> > portable OpenSSH will require LibreSSL, unless someone contributes
> > support for the new OpenSSL API to OpenSSH.
> >
> > Well, we don't claim to support replacing OpenSSL with LibreSSL, and
> > Python is not developed against LibreSSL, so I guess there is no good
> > reason to delay this update.
> >
> > Thoughts? I'll push if there are no objections.
> 
> Sounds good to me!

Great! Pushed as fbf5ca3c5e23a4f48e6d91d7229edca283fa86b9

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]