openssl version

Question

openssl version

marlon-sousa opened this issue 3 years ago · 10 comments

marlon-sousa commented 3 years ago

Hello,

By reading the docker file it seems openssl 1.1 is not supported. Is this the case?

I ask because on the README file this is not clear and this is an important information.

Thanks,
Marlon

Answer 1 · 2021-09-28T16:22:33.000Z

Yeah, that's correct. #9 did try to address this, but have not had time to look at it. We should update the documentation for it though.

Answer 2 · 2021-09-28T16:46:52.000Z

Have you looked at https://github.com/emk/rust-musl-builder?

This is a kit similar project, although it doesn't seem to be maintained anymore.

Perhaps it makes sense to use the same aproach they did to get openssl to compile.

Answer 3 · 2021-09-28T16:50:32.000Z

Ah, yeah, I think there's a lot of implicit sharing of ideas between these projects (i.e. emk, golddranks, mine) but must admit* haven't been paying that much attention to it lately.

I think it would make sense to port that approach here, as you suggest 👍
Might be a bit busy this week, but if you feel up for it, feel free to try to raise a PR.

Answer 4 · 2021-09-30T21:57:10.000Z

I think that this become more important as of today (30-sep-2021) given that DST Root CA X3 expired and it may cause troubles for produced binaries (I got "expired certificate" myself while building pijul using this image)

Answer 5 · 2021-09-30T22:45:02.000Z

@JonathanxD Thanks that's a good point. I have done a naive bump in the referenced pr #86 and pushed an image from that under clux/muslrust:1.55.0-openssl11. My base tests are passing (e.g. linking works), but don't have DST cert expiry as part of test suite. Do you think you would be able to test it out?

Answer 6 · 2021-09-30T23:42:54.000Z

@clux Sure I can!! And it's working! I've been able to build pijul locally and clone the pijul repo itself, which wasn't working before (because of expired cert).
I'm now updating my CI/CD environment and it will solve the problem I was having.

Tks so much!!

Answer 7 · 2021-10-01T08:21:51.000Z

FWIW, we also use muslrust and were having issues with the expired DST certs. The 1.55.0-openssl11 image also fixed things for us. Thanks a bunch!

Answer 8 · 2021-10-01T12:57:30.000Z

Awesome. Thanks all. I'll merge and get some releases out over the next couple of days.

Answer 9 · 2021-10-01T13:08:11.000Z

Ok, some few extra linking issues on the tests (hyper test is very out of date) so keeping this open until this is open for now and will try to fix it later.

Answer 10 · 2021-10-02T14:28:27.000Z

Ok, both builds (nightly and stable) have propagated new tags to docker hub with version 1.1.1i of openssl. closing 😅