Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
do i need to recompile linked apps after openssl upgrade?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Portage & Programming
View previous topic :: View next topic  
Author Message
hexa
Apprentice
Apprentice


Joined: 10 Aug 2005
Posts: 163

PostPosted: Thu Jul 03, 2008 7:56 pm    Post subject: do i need to recompile linked apps after openssl upgrade? Reply with quote

I want to upgrade this.
dev-libs/openssl-0.9.8g-r2 [0.9.8f]
I wonder if i will have to recompile all applications dynamically linked to openssl? I think the lib file name stays the same and it won't be required.
Code:

veliki lib # ls -la libss*
-rw-r--r-- 1 root root  55570 Jan  9 14:34 libss.a
-rwxr-xr-x 1 root root    325 Jan  9 14:34 libss.so
-rw-r--r-- 1 root root 623528 Oct 18  2007 libssl.a
lrwxrwxrwx 1 root root     15 Oct 18  2007 libssl.so -> libssl.so.0.9.8
-r-xr-xr-x 1 root root 327856 Oct 18  2007 libssl.so.0.9.8


Thanks for info.
Back to top
View user's profile Send private message
VoidMage
Watchman
Watchman


Joined: 14 Oct 2006
Posts: 6196

PostPosted: Thu Jul 03, 2008 9:01 pm    Post subject: Reply with quote

Well, it's hard to tell.
IIRC, on some releases, even though lib number didn't change,
some apps still had to be rebuilt, i.e. ssh. On others, though,
no rebuild seemed necessary, as everything seemed to work.
Simply try and see if anything breaks.
Back to top
View user's profile Send private message
hexa
Apprentice
Apprentice


Joined: 10 Aug 2005
Posts: 163

PostPosted: Thu Jul 03, 2008 9:09 pm    Post subject: Reply with quote

So ssh needs to be rebuilt, apache doesn't?
Back to top
View user's profile Send private message
pappy_mcfae
Watchman
Watchman


Joined: 27 Dec 2007
Posts: 5999
Location: Pomona, California.

PostPosted: Thu Jul 03, 2008 10:39 pm    Post subject: Reply with quote

Run revdep-rebuild. If there are any problems after an emerge, revdep-rebuild will fix it.

Blessed be!
Pappy
_________________
This space left intentionally blank, except for these ASCII symbols.
Back to top
View user's profile Send private message
Hu
Moderator
Moderator


Joined: 06 Mar 2007
Posts: 21644

PostPosted: Fri Jul 04, 2008 2:31 am    Post subject: Reply with quote

pappy_mcfae wrote:
Run revdep-rebuild. If there are any problems after an emerge, revdep-rebuild will fix it.


This is not necessarily true. revdep-rebuild can identify situations where a required library has vanished, but it cannot necessarily detect situations where the ABI of an installed library was changed. For example, some libraries encourage client applications to directly manipulate the contents of data structures defined by the library. If the library author changes the layout of that data structure, that constitutes an ABI change, and all applications which manipulate the structure need to be recompiled.

Best practices state that the library author should arrange for a load-time break when an application using the old ABI tries to load a library using the new ABI. This allows the user to quickly recognize that a problem exists. Often, this break is implemented by changing the library name, which revdep-rebuild detects. Without a load-time break, the application may slowly corrupt its internal state due to disagreement with the library about how the structure is laid out. Unfortunately, not all projects follow best practices in this regard.

All that said, I do not know whether the proposed openssl upgrade constitutes an ABI change. I only responded because I wanted to point out that revdep-rebuild does not necessarily find all compatibility problems caused by an upgrade. The failure scenario I described above cannot be detected by inspection of the library metadata, so it is not possible for revdep-rebuild to detect this scenario.
Back to top
View user's profile Send private message
baeksu
l33t
l33t


Joined: 26 Sep 2004
Posts: 609
Location: Seoul, Korea

PostPosted: Fri Jul 04, 2008 2:45 am    Post subject: Reply with quote

You can run 'equery d openssl' (available from gentoolkit) to see which apps depend on openssl.

This, together with revdep-rebuild, is the only way to know what packages might break, AFAIK. As to whether they will break, I guess you'll have to try them to see.
_________________
Gnome:
1. A legendary being.
2. A never ending quest to make unix friendly to people who don't want unix and excruciating for those that do.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Portage & Programming All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum