[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#797926: transition: openssl: remove SSLv3 methods



Hi,

the first binNMU round has shown some problems, e.g. on casablanca

cd /«PKGBUILDDIR»/obj-x86_64-linux-gnu/src && /usr/bin/c++   -Dcpprest_EXPORTS -g -O2 -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2  -std=c++11 -fno-strict-aliasing -Wall -Wextra -Wunused-parameter -Wcast-align -Wcast-qual -Wconversion -Wformat=2 -Winit-self -Winvalid-pch -Wmissing-format-attribute -Wmissing-include-dirs -Wpacked -Wredundant-decls -Wunreachable-code -Werror -pedantic -fPIC -I/«PKGBUILDDIR»/Release/include -I/«PKGBUILDDIR»/Release/src/pch    -o CMakeFiles/cpprest.dir/http/listener/http_server_asio.cpp.o -c /«PKGBUILDDIR»/Release/src/http/listener/http_server_asio.cpp
In file included from /usr/include/boost/asio/ssl/context.hpp:786:0,
from /usr/include/boost/asio/ssl.hpp:19,
from /usr/include/websocketpp/common/asio_ssl.hpp:34,
from /usr/include/websocketpp/transport/asio/security/tls.hpp:36,
from /usr/include/websocketpp/config/asio_client.hpp:33,
from /«PKGBUILDDIR»/Release/src/websockets/client/ws_client_wspp.cpp:38:
/usr/include/boost/asio/ssl/impl/context.ipp: In constructor 'boost::asio::ssl::context::context(boost::asio::ssl::context_base::method)':
/usr/include/boost/asio/ssl/impl/context.ipp:93:29: error: '::SSLv3_method' has not been declared
handle_ = ::SSL_CTX_new(::SSLv3_method());
^
/usr/include/boost/asio/ssl/impl/context.ipp:96:29: error: '::SSLv3_client_method' has not been declared
handle_ = ::SSL_CTX_new(::SSLv3_client_method());
^
/usr/include/boost/asio/ssl/impl/context.ipp:99:29: error: '::SSLv3_server_method' has not been declared
handle_ = ::SSL_CTX_new(::SSLv3_server_method());
^


however this is exposed by boost-1.58, not by casablanca (which might have also issues, but that's another story).


seems that many libraries are using it 
http://codesearch.debian.net/results/SSLv3_method/page_0

so you might want to fix them prior to binNMU rdeps, right?


Reply to: