Report information
The Basics
Id:
43530
Status:
resolved
Priority:
Medium/Medium
Queue:
bind9-public
People
Owner:
Nobody in particular
Requestors:
<mruprich@redhat.com>
Cc:
AdminCc:
BugTracker
Version Fixed:
N/A
Version Found:
(no value)
Versions Affected:
(no value)
Versions Planned:
(no value)
Priority:
P2 Normal
Severity:
S2 Normal
CVSS Score:
(no value)
CVE ID:
(no value)
Component:
BIND Server
Area:
feature
Dates
Created:Tue, 01 Nov 2016 05:00:13 -0400
Updated:Fri, 07 Jul 2017 19:28:15 -0400
Closed:Mon, 03 Apr 2017 20:22:56 -0400

This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

History
  Tue, 01 Nov 2016 05:00:13 -0400 <noreply@isc.org> - Ticket created
CC: marketing@isc.org
Subject: ISC Client: OpenSSL 1.1.0 API change - RedHat
Date: Tue, 1 Nov 2016 09:00:10 +0000
To: bind-bugs@isc.org
From: "Michal Ruprich" <noreply@isc.org>


Message from Michal Ruprich

  • Full Name: Michal Ruprich
  • Organization: RedHat
  • E-mail: mruprich@redhat.com
  • Phone Number:

      • Message

      Hi,

      there is a new OpenSSL version (1.1.0) which changes its API. I have a patch which fixes the transition for version 9.10.4-P3 and I plan to edit it a little so that it works for 9.11 as well.

      The problem is that right now the patch transforms the API to the new version and doesn't count with usage of any older versions. This could of course be solved with couple of #ifdefs but before I get to it, I wanted to ask you whether you plan to abandon older OpenSSL API or not. If so, the #ifdefs would not be necessary and I could provide you with the patch right away. If not, it will need some more work of course.

      Thank you in advance,
      Michal Ruprich

      This email was sent from Contact ISC in ISC's Wordpress Page

  Tue, 01 Nov 2016 06:12:59 -0400 Francis Dupont <Francis_Dupont@isc.org> - Correspondence added

On Tue Nov 01 09:00:13 2016, noreply@isc.org wrote: > there is a new OpenSSL version (1.1.0) which changes its API. I have > a patch which fixes the transition for version 9.10.4-P3 and I plan to > edit it a little so that it works for 9.11 as well. => thanks but we already added support of OpenSSL 1.1.0 and its new/not-compatible API, cf: 4497. [port] Add support for OpenSSL 1.1.0. [RT #41284] note according to the ticket it is not yet fully merged (there are some cleanups to do and 9.9 code needs specific review) but if you have access to the git repo you should find what you need/want. BTW I have a similar ticket (under review) for Kea.
Tue, 01 Nov 2016 06:13:00 -0400 The RT System itself - Status changed from 'new' to 'open'
  Tue, 01 Nov 2016 06:15:47 -0400 Mark Andrews <marka@isc.org> - Correspondence added
Subject: Re: [ISC-Bugs #43530] ISC Client: OpenSSL 1.1.0 API change - RedHat
Date: Tue, 01 Nov 2016 21:15:36 +1100
To: bind9-bugs@isc.org
From: "Mark Andrews" <marka@isc.org>

This is already in hand. In message <rt-4.2.8-67665-1477990813-1871.43530-3-0@isc.org>, "noreply@isc.org via RT" wr ites: > > Tue Nov 01 09:00:13 2016: Request 43530 was acted upon. > Transaction: Ticket created by noreply@isc.org > Queue: bind9 > Subject: ISC Client: OpenSSL 1.1.0 API change - RedHat > Owner: Nobody > Requestors: noreply@isc.org > Status: new > Ticket <URL: https://bugs.isc.org/Ticket/Display.html?id=43530 > > ----------------------------------------------------------------------- > > Message from Michal Ruprich > > Full Name: Michal Ruprich > Organization: RedHat > E-mail: mruprich@redhat.com > Phone Number: > > Message > Hi, > there is a new OpenSSL version (1.1.0) which changes its API. I have a patch which fixes > the transition for version 9.10.4-P3 and I plan to edit it a little so that it works fo > r 9.11 as well. > The problem is that right now the patch transforms the API to the new version and doesn' > t count with usage of any older versions. This could of course be solved with couple of > #ifdefs but before I get to it, I wanted to ask you whether you plan to abandon older Op > enSSL API or not. If so, the #ifdefs would not be necessary and I could provide you with > the patch right away. If not, it will need some more work of course. > Thank you in advance, > Michal Ruprich > > This email was sent from Contact ISC in ISC's Wordpress Page > > -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka@isc.org
Mon, 28 Nov 2016 13:47:37 -0500 Stephen Morris <stephen@isc.org> - Priority P2 Normal added
Mon, 28 Nov 2016 13:47:38 -0500 Stephen Morris <stephen@isc.org> - Severity S2 Normal added
Mon, 28 Nov 2016 13:47:38 -0500 Stephen Morris <stephen@isc.org> - Area feature added
Mon, 28 Nov 2016 13:47:39 -0500 Stephen Morris <stephen@isc.org> - Component BIND Server added
Mon, 03 Apr 2017 20:22:55 -0400 Mark Andrews <marka@isc.org> - Requestor <noreply@isc.org> deleted
Mon, 03 Apr 2017 20:22:56 -0400 Mark Andrews <marka@isc.org> - Requestor <mruprich@redhat.com> added
Mon, 03 Apr 2017 20:22:56 -0400 Mark Andrews <marka@isc.org> - Status changed from 'open' to 'resolved'
Wed, 24 May 2017 11:05:23 -0400 Stephen Morris <stephen@isc.org> - Version Fixed N/A added
Fri, 07 Jul 2017 19:28:15 -0400 Vicky Risk <vicky@isc.org> - Queue changed from #6 to bind9-public