Skip to content

deps: update openssl config - #5630

Closed
shigeki wants to merge 1 commit into
nodejs:masterfrom
shigeki:update_openssl_config
Closed

deps: update openssl config#5630
shigeki wants to merge 1 commit into
nodejs:masterfrom
shigeki:update_openssl_config

Conversation

@shigeki

Copy link
Copy Markdown
Contributor

Pull Request check-list

  • Does make -j8 test (UNIX) or vcbuild test nosign (Windows) pass with
    this change (including linting)?
  • Is the commit message formatted according to [CONTRIBUTING.md][0]?
  • [CI tests] If this change fixes a bug (or a performance problem), is a regression
    test (or a benchmark) included?
  • Is a documentation update included (if this change modifies
    existing APIs, or introduces new ones)?

Affected core subsystem(s)

deps: openssl

Description of change

deps/openssl/config were not updated in the last upgrading. Two new defines of OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in opensslconf.h.

This disables several ciphers included in EXPORT and LOW. They are also disabled in the default cipher list but I think that applying this to LTS should be discussed in LTS issue. I will open it.

CI is running on https://ci.nodejs.org/job/node-test-commit/2502/ but something Jenkins error was on MacOS. I will try it again.

R: @bnoordhuis

OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in
opensslconf.h
@shigeki

Copy link
Copy Markdown
ContributorAuthor

@Fishrock123

Copy link
Copy Markdown
Contributor

s/udpate/update/ :)

@Fishrock123Fishrock123 added the openssl Issues and PRs related to the OpenSSL dependency. label Mar 9, 2016
@shigeki
shigekiforce-pushed the update_openssl_config branch from a12afa6 to d76834dCompareMarch 9, 2016 17:14
@shigekishigeki changed the title deps: udpate openssl configdeps: update openssl configMar 9, 2016
@shigeki

Copy link
Copy Markdown
ContributorAuthor

@Fishrock123 Oops. Fixed typo. Thanks.

@shigeki
shigekiforce-pushed the update_openssl_config branch from d76834d to ca8adf0CompareMarch 10, 2016 01:18
@shigeki

Copy link
Copy Markdown
ContributorAuthor

CI in https://ci.nodejs.org/job/node-test-commit/2505/ is all green.

@shigeki

Copy link
Copy Markdown
ContributorAuthor

Strictly speaking, this fix corresponds to semver-major. As discussed in LTS on nodejs/Release#85, I would like to apply this to 5.x.

@jasnell

Copy link
Copy Markdown
Member

LGTM for master... Let's add it to the lts-agenda for Monday to discuss.

@shigeki

Copy link
Copy Markdown
ContributorAuthor

@indutny Could you review this PR?

@indutny

Copy link
Copy Markdown
Member

LGTM, if CI is green

@shigeki

Copy link
Copy Markdown
ContributorAuthor

@indutny Thanks. CI was submitted in https://ci.nodejs.org/job/node-test-pull-request/1927/.

shigeki pushed a commit that referenced this pull request Mar 15, 2016
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in
opensslconf.h
Fixes: nodejs/Release#85
PR-URL: #5630
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Fedor Indutny <fedor@indutny.com>
@shigeki

Copy link
Copy Markdown
ContributorAuthor

CI is all green. Landed in 668fb17. Thanks.

@jasnell

Copy link
Copy Markdown
Member

@shigeki ... This was backported to v0.12 and v0.10 in #5712 correct?

Also, removed the lts-agenda label on this since it was decided via the github conversation to go ahead and land this in the lts branches.

@shigeki

Copy link
Copy Markdown
ContributorAuthor

@jasnell#5712 was the fix for openssl-1.0.1 and it has already landed to v0.12-staging and v0.10-staging branches. This PR is the fix for openssl-1.0.2 and it need to be backported from master to 5.x and 4.x. I would like you to take care of them.

@jasnell

Copy link
Copy Markdown
Member

Sounds good! :-)

evanlucas pushed a commit that referenced this pull request Mar 15, 2016
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in
opensslconf.h
Fixes: nodejs/Release#85
PR-URL: #5630
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Fedor Indutny <fedor@indutny.com>
@evanlucasevanlucas mentioned this pull request Mar 15, 2016
rvagg pushed a commit that referenced this pull request Mar 16, 2016
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in
opensslconf.h
Fixes: nodejs/Release#85
PR-URL: #5630
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Fedor Indutny <fedor@indutny.com>
@MylesBorins

Copy link
Copy Markdown
Contributor

@shigeki is this pressing enough to roll into the next v4 release asap or should it have a bit of time to live on v5 first?

@shigeki

Copy link
Copy Markdown
ContributorAuthor

@thealphanerd This fix is a kind of regular procedures in upgrading openssl and has just a small risk. So it's already enough to roll to v4.x.

MylesBorins pushed a commit that referenced this pull request Mar 21, 2016
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in
opensslconf.h
Fixes: nodejs/Release#85
PR-URL: #5630
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Fedor Indutny <fedor@indutny.com>
MylesBorins pushed a commit that referenced this pull request Mar 21, 2016
OPENSSL_NO_SSL2 and OPENSSL_NO_WEAK_SSL_CIPHERS are defined in
opensslconf.h
Fixes: nodejs/Release#85
PR-URL: #5630
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Fedor Indutny <fedor@indutny.com>
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

opensslIssues and PRs related to the OpenSSL dependency.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@shigeki@Fishrock123@jasnell@indutny@MylesBorins