Forums

Skip to content

Advanced search
  • Quick links
    • Unanswered topics
    • Active topics
    • Search
  • FAQ
  • Login
  • Register
  • Board index Assistance Portage & Programming
  • Search

Howto for build openssl >= 0.9.7

Problems with emerge or ebuilds? Have a basic programming question about C, PHP, Perl, BASH or something else?
Post Reply
Advanced search
36 posts
  • 1
  • 2
  • Next
Author
Message
kENNy_
n00b
n00b
Posts: 45
Joined: Fri Dec 06, 2002 1:37 am
Location: Hannover/Germany

Howto for build openssl >= 0.9.7

  • Quote

Post by kENNy_ » Wed May 14, 2003 11:26 pm

Hi there,

in the ebuild for openssl 0.9.7b is a big warning

8OBIG FAT WARNING!!!8O

You must re-emerge every package that links to openssl after you have
merged openssl 0.9.7 This is becuse packages that links against
openssl 0.9.7 links against the full version. Also, if you don't have the
sources for the packages you need to re-emerge you should download
them with emerge -f prior to the installation of openssl 0.9.7 This is
becuse wget may be linked against openssl 0.9.7 To generate a list of
packages that links against openssl 0.9.7 you can download and run the
script from http://cvs.gentoo.org/~aliz/openssl_update.sh If
you are using binary packages you need to rebuild those against the
new version of openssl 0.9.7.


But after I read this warning, I updated openssl!

OK let's start

Code: Select all

cd /usr/portage/dev-libs/openssl/
emerge -u openssl-0.9.7b.ebuild
After this you have to run the script openssl_update.sh

Code: Select all

sh openssl_update.sh > liste1
Now we have a file with all packages that needs an update after openssl is updated.

After this emerge the biggest problem is to emerge the packages that you have to update in the right order.
For this I coded I small perl script

Code: Select all

#!/usr/bin/perl

open (IN,"<liste1");  # the file where the output from the given script
                      # is. http://cvs.gentoo.org/~aliz/openssl_update.sh
@in = <IN>;
close IN;

@out = sort @in;

for ($i=0;$i<$#out;$i++){
  while ($out[$i] eq $out[$i+1]){
    splice(@out,$i,1);
  }
}

while (@out){
  $output = "$#out packages left to sort.    \n";
  printf $output;
  @first = `emerge -ep =$out[0]`;
  if ($first[4] =~ /have been masked/){
    push @new,$out[0];
    splice (@out,0,1);
  }elsif ($first[4] =~ /there are no masked/){
    print "** Error ** Can't find package: $out[0]\n\n";
    splice (@out,0,1);
  }else{
    splice (@first,-1);  #cut the lines from emerge -ep package at 
                                # the end. Should be -1 or -2
    splice (@first,0,4); # same with the first 4 lines
    foreach $i (@first){
      my @tmp = split(/]\ /,$i);
      my $pak = @tmp[1];
      chomp $pak;
      $num = 0;
      foreach $j (@out){
        chomp $j;
        if ($pak =~ $j){
          push @new,$j;
          splice (@out,$num,1);
        }
        $num++;
      }
    }
  }
  printf "^[[1A";  #ESC[1A to move the coursor one line up
}

print "in the following order the packages should go to emerge:\n";
foreach $i (@new){
  print $i."\n";
}
Let's execute the script, and go into the kitchen and get now a cup coffee.

After the script is finished you know in which order you should emerge the packages.
Do this by type for each line

Code: Select all

emerge =name/in_the_list-version
Or write your own small script for it :)

Now you better get down and pray!
Good luck! 8O
Last edited by kENNy_ on Thu May 22, 2003 9:29 am, edited 1 time in total.
Top
Carlo
Developer
Developer
User avatar
Posts: 3356
Joined: Mon Aug 12, 2002 10:57 pm

  • Quote

Post by Carlo » Thu May 15, 2003 9:01 am

Reading this I think qpkg should have two extra options; One to sort its output dependency-wise and another to list only the packages. I mean, why an extra script, if qpkg -I -q openssl does nearly the same?


Carlo
Top
kENNy_
n00b
n00b
Posts: 45
Joined: Fri Dec 06, 2002 1:37 am
Location: Hannover/Germany

  • Quote

Post by kENNy_ » Thu May 15, 2003 9:50 am

You have to update much more packages than "qpkg -I -q openssl" find.
The script http://cvs.gentoo.org/~aliz/openssl_update.sh find every package that links again openssl.
"qpkg -I -q openssl" only finds the packages what have DEPEND="openssl" in the ebuild.
Top
Carlo
Developer
Developer
User avatar
Posts: 3356
Joined: Mon Aug 12, 2002 10:57 pm

  • Quote

Post by Carlo » Thu May 15, 2003 1:07 pm

kENNy_ wrote:You have to update much more packages than "qpkg -I -q openssl" find.
:oops: I see. Dumb idea.

Another one: The openssl_update.sh script produces only an "empty list" for me... :?:


Carlo
Top
alexbuell
Guru
Guru
Posts: 503
Joined: Thu Jul 18, 2002 6:49 am
Location: "Hemp"shire, UK
Contact:
Contact alexbuell
Website

  • Quote

Post by alexbuell » Sat May 17, 2003 4:13 pm

Carlo wrote:
kENNy_ wrote:You have to update much more packages than "qpkg -I -q openssl" find.
:oops: I see. Dumb idea.

Another one: The openssl_update.sh script produces only an "empty list" for me... :?:


Carlo
Same here.. ?!
Top
TheEternalVortex
Apprentice
Apprentice
User avatar
Posts: 207
Joined: Tue Oct 15, 2002 6:38 am
Location: San Jose, CA
Contact:
Contact TheEternalVortex
Website

  • Quote

Post by TheEternalVortex » Sat May 17, 2003 7:58 pm

I'm currently running openssl 0.9.7b, and I didn't have to run this script at all. I just reinstalled packages depending on openssl and everything seems to be working. Now granted I've only been doing this for a few days, so problems might arise in the future, but it should be a simple matter to fix them. Just make sure you have the wget sources first, since you'll need that to fetch any other sources.

$ ldd /usr/bin/wget
libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0x4002b000)
libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0x4005c000)
libdl.so.2 => /lib/libdl.so.2 (0x4015c000)
libc.so.6 => /lib/libc.so.6 (0x4015f000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)
-- Andy
Top
funkmankey
Guru
Guru
User avatar
Posts: 304
Joined: Thu Mar 06, 2003 4:06 am
Location: CH
Contact:
Contact funkmankey
Website

  • Quote

Post by funkmankey » Sun May 18, 2003 4:13 am

I'm with the Vortex on this one -- as long as you fetch wget first, you're safe.

Code: Select all

etcat depends openssl
was not too helpful, prolly does similar to the qpkg command listed above.

gnome-vfs failed to rebuild, but gave enough info that rebuilding gconf first fixed that issue. other stuff like ssh, samba, gaim was pretty obvious anyway.

guess we will just have to see what else breaks in the next few days... ;-]
Top
repugnant
Tux's lil' helper
Tux's lil' helper
User avatar
Posts: 86
Joined: Wed Apr 16, 2003 6:23 pm

  • Quote

Post by repugnant » Sun May 18, 2003 8:32 pm

For people getting an empty list after running openssl_update.sh, you have to run the script *after* you update OpenSSL. I had the same problem at first :) (Be sure to emerge -f wget before emerging OpenSSL!)
Top
GoinBald
n00b
n00b
Posts: 39
Joined: Sat Apr 19, 2003 2:08 pm
Location: Canada

How long does that script take?

  • Quote

Post by GoinBald » Thu May 22, 2003 4:44 pm

Hello Everyone,
Thanks for the HOWTO Muchos appreciated!
I was wondering how long that script takes.
This could be a cut n' paste issue. So if someone could post a working file to ensure it isn't it would also be appreciated. :)
When I attempt to sort, the output returned is (something like)
65 packages to sort
^[[55 packages left to sort
^[[55 packages left to sort
^[[55 packages left to sort
^[[55 packages left to sort
^[[55 packages left to sort
^[[55 packages left to sort

This continues for a long time :(

TIA,
another Homer look-alike. :)
Top
repugnant
Tux's lil' helper
Tux's lil' helper
User avatar
Posts: 86
Joined: Wed Apr 16, 2003 6:23 pm

  • Quote

Post by repugnant » Thu May 22, 2003 10:07 pm

I had this problem too. I ended up emerging everything in the list generated by update_openssl. Could be a cut-n-paste problem though.
Top
GoinBald
n00b
n00b
Posts: 39
Joined: Sat Apr 19, 2003 2:08 pm
Location: Canada

Emerging now.

  • Quote

Post by GoinBald » Fri May 23, 2003 12:31 am

Hello,
I ended up, restoring openssl then running the script.
Then openssl-wget-list :)

Owner of the 3 tooth comb!
(had to put a tag in ;) )
Top
kENNy_
n00b
n00b
Posts: 45
Joined: Fri Dec 06, 2002 1:37 am
Location: Hannover/Germany

  • Quote

Post by kENNy_ » Fri May 23, 2003 11:00 am

yes, I have the same now. There are some changes in the new portage I think.

Please do a "emerge -ep something" and count the empty lines after the last package that is listed.
If there are only one line set the number to "-1".
If there are two lines set the number to "-2".

Code: Select all

  }else{
    splice (@first,-1);  #cut the lines from emerge -ep package at
                                # the end. Should be -1 or -2
    splice (@first,0,4); # same with the first 4 lines
kENNy
Top
GoinBald
n00b
n00b
Posts: 39
Joined: Sat Apr 19, 2003 2:08 pm
Location: Canada

She's completed!

  • Quote

Post by GoinBald » Fri May 23, 2003 12:04 pm

Hello,
Thanks again!
I can't say this enough!
Had to use a few experimental builds though
sasl, libgtkhtml, gal, gnome-vfs, evolution ...
they didn't play nicely with .9.7x
Thanks again,

Heavy holder in Turtle Wax. ;)

P.S. I really liked the update to the xterm subject title!
Top
MaD-DaRiUs
n00b
n00b
User avatar
Posts: 46
Joined: Wed Aug 21, 2002 11:23 pm
Location: BC, Canada
Contact:
Contact MaD-DaRiUs
Website

  • Quote

Post by MaD-DaRiUs » Thu Jun 12, 2003 3:13 pm

hm, is it just me or isn't a little stupid that you have to run the script after you upgrade to find out what you need?

well it seems you can fix this little problem simply by hacking there little script like so.

Code: Select all

#!/bin/bash

#replace this with the currently installed version
openssl_installed="0.9.6"

for i in $(find / -type f -name '*.so*' 2>/dev/null) \
        $(find $(echo $PATH | sed 's/:/ /g') -type f -perm +0111 2>/dev/null); do
                ldd ${i} 2>&1 | grep -e "libcrypto.so.${openssl_installed}" \
                        -e "libssl.so.${openssl_installed}" - >/dev/null \
                        && qpkg -f -nc  -v $i
        done
you basically just have to change these lines to get rid of the "=> not found"

Code: Select all

ldd ${i} 2>&1 | grep -e "libcrypto.so.${openssl_installed} => not found" \
                        -e "libssl.so.${openssl_installed} => not found" - >/dev/null \
which you don't really need because there aren't going to be any apps that rely on libssl and libcrypto that will relink themselves.
elementary actually it's so easy i am surprised no one else has posted this
Top
swimgeek
Tux's lil' helper
Tux's lil' helper
User avatar
Posts: 124
Joined: Fri May 09, 2003 5:34 pm
Location: Minneapolis, MN, USA

openssh installation problems after emerge openssl 0.9.7b

  • Quote

Post by swimgeek » Thu Aug 14, 2003 2:38 am

Hi,
I emerged openssl-0.9.7b and then tried to re-emerge openssh and here is the error message I got:

Code: Select all

gcc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect1.o sshconnect2.o -L. -Lopenbsd-compat/  -lssh -lopenbsd-compat -lutil -lz -lnsl -lcrypto
./libssh.a(rsa.o)(.text+0x269): In function `rsa_generate_additional_parameters':
: undefined reference to `BN_mod'
./libssh.a(rsa.o)(.text+0x29b): In function `rsa_generate_additional_parameters':
: undefined reference to `BN_mod'
collect2: ld returned 1 exit status
make: *** [ssh] Error 1
make: *** Waiting for unfinished jobs....

!!! ERROR: net-misc/openssh-3.6.1_p2 failed.
!!! Function src_compile, Line 92, Exitcode 2
!!! compile problem
Did anyone get the same message? What might be wrong?

thanks!
Top
Carlo
Developer
Developer
User avatar
Posts: 3356
Joined: Mon Aug 12, 2002 10:57 pm

  • Quote

Post by Carlo » Wed Aug 27, 2003 12:09 am

:!: ^ :arrow: http://bugs.gentoo.org/show_bug.cgi?id=13795


Carlo
Please make sure that you have searched for an answer to a question after reading all the relevant docs.
Top
elfo
n00b
n00b
Posts: 12
Joined: Mon Jun 30, 2003 3:12 pm

Needed to compile openssl-0.7.9 by HAND

  • Quote

Post by elfo » Wed Sep 24, 2003 5:26 pm

emerge openssl just didn't compile the libs, just docs and headers...
instead of compiling it gave me a very very long list of "coloured" errors... like he was doing a "cat" on the configure and/or the Makefile instead of *running* them.

so my problem is BEFORE re-emerging the packages linked to libssl/libcrypto or whatever.

I compiled openssl 0.7.9 by hand (it worked fine.. so i think there are some problems with the ebuild...?)

after i emerged openssl 0.7.9 again... and didn't work at all (same thing as before).. but i had my libssl.so.0.7.9 in /usr/lib from manually installed openssl.

i tried to emerge wget.. and magically it just "compiled" docs and unuseful stuffs but it didn't actually compiled any code.

hope this wont be useful for anybody.
Top
elfo
n00b
n00b
Posts: 12
Joined: Mon Jun 30, 2003 3:12 pm

you know.. i'm getting REALLY angry...

  • Quote

Post by elfo » Wed Sep 24, 2003 5:41 pm

i can emerge (mostly) everything without problems...
why openssl is so different?

i'm wondering what i'm supposed to do with this... send to hell emerge and continue manually? but I think emerge will get angry when i'll use it again....

this is an S.O.S


thank you for all the fish..
Top
Lasker
Guru
Guru
User avatar
Posts: 445
Joined: Wed Jul 17, 2002 2:52 pm

  • Quote

Post by Lasker » Thu Sep 25, 2003 2:21 am

Is it safe to unmerge openssl?
I really don't want to end up in a white jacket after rebuilding my whole system every 3 days! :evil:
Top
friday
n00b
n00b
User avatar
Posts: 28
Joined: Fri Feb 07, 2003 9:43 pm
Location: Germany
Contact:
Contact friday
Website

  • Quote

Post by friday » Tue Sep 30, 2003 5:25 pm

Have a look at

Code: Select all

# revdep-rebuild --help
Cheers
Top
JjcampNR
Tux's lil' helper
Tux's lil' helper
User avatar
Posts: 127
Joined: Sun Mar 02, 2003 5:42 am
Location: Massachusetts, USA
Contact:
Contact JjcampNR
Website

  • Quote

Post by JjcampNR » Thu Nov 06, 2003 2:08 am

Fantastic! Thanks, that definitely did the trick. :D

--Josh
Damn the man, fight the power!

http://www.torquenetworks.com
Top
charstar
n00b
n00b
User avatar
Posts: 30
Joined: Tue Feb 11, 2003 11:56 pm
Location: Vancouver, WA
Contact:
Contact charstar
Website

  • Quote

Post by charstar » Thu Nov 06, 2003 2:30 am

all i've got to say is
dude, this sucks
:cry:
Top
tomaw
Guru
Guru
User avatar
Posts: 429
Joined: Wed Mar 26, 2003 7:53 am
Location: UK

  • Quote

Post by tomaw » Thu Nov 06, 2003 8:23 am

friday wrote:Have a look at

Code: Select all

# revdep-rebuild --help
Cheers
This works perfectly for me. After doing a `revdep-rebuild -p` then `revdep-rebuild` everything is working fine. Course I already had the source files downloaded....
Tom Wesley
Top
joshdr77
Apprentice
Apprentice
Posts: 180
Joined: Fri Jan 03, 2003 1:36 pm

  • Quote

Post by joshdr77 » Sat Nov 08, 2003 11:50 am

hey

got everything working good but openssh

it cant emerge, and i have read a few post on howto fix it, but it dosnt work

can neone help me
Top
Beekster
Apprentice
Apprentice
User avatar
Posts: 268
Joined: Tue Nov 26, 2002 8:32 am
Location: Sydney

  • Quote

Post by Beekster » Tue Nov 11, 2003 12:15 am

The http://cvs.gentoo.org/~aliz/openssl_update.sh link isn't working for me at the moment, can someone please post the script to this thread?

Thanks in advance...
Top
Post Reply

36 posts
  • 1
  • 2
  • Next

Return to “Portage & Programming”

Jump to
  • Assistance
  • ↳   News & Announcements
  • ↳   Frequently Asked Questions
  • ↳   Installing Gentoo
  • ↳   Multimedia
  • ↳   Desktop Environments
  • ↳   Networking & Security
  • ↳   Kernel & Hardware
  • ↳   Portage & Programming
  • ↳   Gamers & Players
  • ↳   Other Things Gentoo
  • ↳   Unsupported Software
  • Discussion & Documentation
  • ↳   Documentation, Tips & Tricks
  • ↳   Gentoo Chat
  • ↳   Gentoo Forums Feedback
  • ↳   Duplicate Threads
  • International Gentoo Users
  • ↳   中文 (Chinese)
  • ↳   Dutch
  • ↳   Finnish
  • ↳   French
  • ↳   Deutsches Forum (German)
  • ↳   Diskussionsforum
  • ↳   Deutsche Dokumentation
  • ↳   Greek
  • ↳   Forum italiano (Italian)
  • ↳   Forum di discussione italiano
  • ↳   Risorse italiane (documentazione e tools)
  • ↳   Polskie forum (Polish)
  • ↳   Instalacja i sprzęt
  • ↳   Polish OTW
  • ↳   Portuguese
  • ↳   Documentação, Ferramentas e Dicas
  • ↳   Russian
  • ↳   Scandinavian
  • ↳   Spanish
  • ↳   Other Languages
  • Architectures & Platforms
  • ↳   Gentoo on ARM
  • ↳   Gentoo on PPC
  • ↳   Gentoo on Sparc
  • ↳   Gentoo on Alternative Architectures
  • ↳   Gentoo on AMD64
  • ↳   Gentoo for Mac OS X (Portage for Mac OS X)
  • Board index
  • All times are UTC
  • Delete cookies

© 2001–2026 Gentoo Authors
Gentoo is a trademark of the Gentoo Foundation, Inc. and of Förderverein Gentoo e.V.
The contents of this document, unless otherwise expressly stated, are licensed under the CC-BY-SA-4.0 license.
The Gentoo Name and Logo Usage Guidelines apply.

Powered by phpBB® Forum Software © phpBB Limited

Privacy Policy