Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

check that libcrypto supports MD2 #453

Closed
wants to merge 1 commit into from
Closed

check that libcrypto supports MD2 #453

wants to merge 1 commit into from

Conversation

rindeal
Copy link

@rindeal rindeal commented Jun 24, 2018

MD2 is disabled by default in OpenSSL.

@rindeal
Copy link
Author

rindeal commented Jun 24, 2018

I'm not opposed to removing it completely, or hiding it behind ifdef guards, but as long as RPM requires it unconditionally, it should be handled in configure.ac as such.

@pmatilai
Copy link
Member

Ehm... where does rpm require MD2? It's never been used for anything at all in rpm AFAIK.

@rindeal
Copy link
Author

rindeal commented Jun 25, 2018

return EVP_md2();

@mlschroe
Copy link
Contributor

The beecrypt glue code in rpm doesn't even support MD2 as digest, so yes, just remove it in digest_openssl.c...

@Conan-Kudo
Copy link
Member

Conan-Kudo commented Jun 25, 2018

There's a patch used in midipix that does this, which I could submit if @pmatilai or @ffesti would be interested in it.

pmatilai added a commit that referenced this pull request Jun 26, 2018
Inspired by #453, adding configure-checks for unused digests algorithms
seems nonsensical, at no point in rpm history have these algorithms been
used for anything in rpm so there's not even backward compatibility to
care about. So the question becomes why do we appear to have (some)
support for those unused algorithms? So lets don't, problem solved...
@pmatilai
Copy link
Member

Simplest of all would be to rip out MD2 everywhere in RPM.

Agreed - and gone: ff4b911

Which makes this PR moot, but thanks for raising the point.

@pmatilai pmatilai closed this Jun 26, 2018
@rindeal rindeal deleted the openssl-md2 branch June 26, 2018 12:28
buildroot-auto-update pushed a commit to buildroot/buildroot that referenced this pull request Mar 31, 2019
openssl support has been added in version 4.14.0 with
rpm-software-management/rpm@64028f9

Add a patch from upstream to fix build with openssl ad MD2 is disabled
by default:
rpm-software-management/rpm#453

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants