From nobody Thu Jul 13 02:18:15 2023 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4R1dZ76TvRz4mYPX; Thu, 13 Jul 2023 02:18:23 +0000 (UTC) (envelope-from yaneurabeya@gmail.com) Received: from mail-pf1-x430.google.com (mail-pf1-x430.google.com [IPv6:2607:f8b0:4864:20::430]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "GTS CA 1D4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4R1dZ660Vgz486G; Thu, 13 Jul 2023 02:18:22 +0000 (UTC) (envelope-from yaneurabeya@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20221208 header.b="CjO/aMJE"; spf=pass (mx1.freebsd.org: domain of yaneurabeya@gmail.com designates 2607:f8b0:4864:20::430 as permitted sender) smtp.mailfrom=yaneurabeya@gmail.com; dmarc=pass (policy=none) header.from=gmail.com Received: by mail-pf1-x430.google.com with SMTP id d2e1a72fcca58-6686a05bc66so164470b3a.1; Wed, 12 Jul 2023 19:18:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1689214699; x=1691806699; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:from:to:cc:subject:date:message-id:reply-to; bh=PcWqz4yhbGGbI7uM0yLq226rJvBmAgPKV3CJ3fLTqUI=; b=CjO/aMJEvxIIOYBysnROS9/nL8QVD/CdJIRmNVkYPZ8c4yxMt0RNxjX1cozHFJRWhO KWC9/K4RYBG3Hb08ejHd3kIC7ASK/RBUw9ZGepshp6MlJjDLLlc4pXVOfsKitcrfBnzK 3ljXqnDqddUvZFLz60TfgmK384eAOLuSPZmXDDRZg/X9M7I/8nEWgWq3cFoxv+PPHIYj dXbtUIOKANlExv0dTghfA/DLMtWRZbBKKc2+xTqg7HBkPU1u1uUhJ1r0Tb1GpuIpwIQX S4JYuVjSHO4KkRoq3cLwPwFQ9EJqG2fZDSs/3cyHIi/zBDdR4FFZ2MCVETOFHtHlhQ0i XQqg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1689214699; x=1691806699; h=references:to:cc:in-reply-to:date:subject:mime-version:message-id :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=PcWqz4yhbGGbI7uM0yLq226rJvBmAgPKV3CJ3fLTqUI=; b=kaK5fx2AvWr1HgYSK4Ch5BRMBtzSu2+Ewi3ceP26G0cZGF3lpq3Qmz/E79rNHpEaoN J71WloveiYA0N5xOObrxRSj6GUfi0IdSXwaorSF6NX30hPLbc1dSDTMRZ3wIHWi87y2l OPTzkT2eGyXUcKzNFLKyEbGORkgtuZjJPlhm7P6TYSaP8Z7I6nT2L5Swtvd5EiRv/0A9 /6UI0//mGl07pjh+REyOoitl3xFnv/C7mpN1QGqO8p9Y0DhRUyb5M5v0ItBHgPXiFSi/ Nqilv+hGPQaypVB8eivG9Fkqkl4SxmGAcGC7/zh6nvsY8kUdc/QDozB2qa/hZqrgYmgT gxQQ== X-Gm-Message-State: ABy/qLYKv3LJraCWZtwAVD+NKEEB670mQb3d2mqf/m+kpL3Gz/p+MBh5 t5T6wvTwEN4nhJTT63QqPCA= X-Google-Smtp-Source: APBJJlFr/GMayl+D3zgn12qI3ezQdnvfHeQkEX2+wSo5T/4RdfKw3S9zjGwYUpwSlEr4NI/Yfuwa3w== X-Received: by 2002:a05:6a00:b91:b0:682:713e:e520 with SMTP id g17-20020a056a000b9100b00682713ee520mr438405pfj.8.1689214698647; Wed, 12 Jul 2023 19:18:18 -0700 (PDT) Received: from smtpclient.apple (c-73-19-52-228.hsd1.wa.comcast.net. [73.19.52.228]) by smtp.gmail.com with ESMTPSA id n7-20020aa79047000000b0063d44634d8csm4229612pfo.71.2023.07.12.19.18.16 (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Wed, 12 Jul 2023 19:18:17 -0700 (PDT) From: Enji Cooper Message-Id: <921B36B8-772E-4070-B34C-D5DF00419C54@gmail.com> Content-Type: multipart/signed; boundary="Apple-Mail=_40E607B9-C423-4B13-9671-CE0EE13D7600"; protocol="application/pgp-signature"; micalg=pgp-sha256 List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.3\)) Subject: Re: Does kyua based testing need some hazmat/bindings/_openssl.abi3.so related updating?: Undefined symbol "ERR_GET_FUNC" Date: Wed, 12 Jul 2023 19:18:15 -0700 In-Reply-To: <16A1ADBE-D6DA-4864-A075-8B122C5C5877@yahoo.com> Cc: The Doctor , FreeBSD Mailing List , "sunpoet@freebsd.org" , Current FreeBSD , Mike Karels To: Mark Millard References: <1E426C5E-B363-4C76-A952-48EF404F6557.ref@yahoo.com> <1E426C5E-B363-4C76-A952-48EF404F6557@yahoo.com> <603B7CEE-F3E3-43C4-B031-9C8A1027CA7E@yahoo.com> <16A1ADBE-D6DA-4864-A075-8B122C5C5877@yahoo.com> X-Mailer: Apple Mail (2.3696.120.41.1.3) X-Spamd-Result: default: False [-5.59 / 15.00]; SIGNED_PGP(-2.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-0.999]; NEURAL_HAM_MEDIUM(-0.99)[-0.990]; MV_CASE(0.50)[]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2607:f8b0:4000::/36]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20221208]; MIME_GOOD(-0.20)[multipart/signed,multipart/alternative,text/plain]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; SUBJECT_HAS_QUESTION(0.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US]; TO_DN_EQ_ADDR_SOME(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; ARC_NA(0.00)[]; TO_MATCH_ENVRCPT_SOME(0.00)[]; FROM_HAS_DN(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; RCVD_TLS_LAST(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[2607:f8b0:4864:20::430:from]; FREEMAIL_FROM(0.00)[gmail.com]; HAS_ATTACHMENT(0.00)[]; TO_DN_SOME(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; MIME_TRACE(0.00)[0:+,1:+,2:+,3:~,4:~]; RCPT_COUNT_FIVE(0.00)[6]; DKIM_TRACE(0.00)[gmail.com:+]; RCVD_COUNT_THREE(0.00)[3]; FROM_EQ_ENVFROM(0.00)[]; FREEMAIL_TO(0.00)[yahoo.com]; MLMMJ_DEST(0.00)[freebsd-ports@freebsd.org,freebsd-current@freebsd.org] X-Rspamd-Queue-Id: 4R1dZ660Vgz486G X-Spamd-Bar: ----- X-ThisMailContainsUnwantedMimeParts: N --Apple-Mail=_40E607B9-C423-4B13-9671-CE0EE13D7600 Content-Type: multipart/alternative; boundary="Apple-Mail=_F141E58F-86ED-467D-8608-D26EE903AF4A" --Apple-Mail=_F141E58F-86ED-467D-8608-D26EE903AF4A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Jul 10, 2023, at 3:27 PM, Mark Millard wrote: >=20 > On Jul 10, 2023, at 15:03, Mark Millard > wrote: >=20 >> On Jul 10, 2023, at 11:42, The Doctor = wrote: >>=20 >>> On Mon, Jul 10, 2023 at 08:56:22AM -0700, Mark Millard wrote: >>>> The subject line's question was prompted by >>>> . . ./hazmat/bindings/_openssl.abi3.so related notices >>>> in a kyua report: >>>>=20 >>>> # kyua report --verbose = --results-file=3Dusr_obj_DESTDIRs_main-CA7-chroot_usr_tests.20230710-06463= 2-752785 2>&1 | grep "Undefined symbol" | sort -u >>>> +ImportError: = /usr/obj/DESTDIRs/main-CA7-chroot/usr/local/lib/python3.9/site-packages/cr= yptography/hazmat/bindings/_openssl.abi3.so: Undefined symbol = "ERR_GET_FUNC" >>>> ImportError: = /usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/_opens= sl.abi3.so: Undefined symbol "ERR_GET_FUNC" >>>> ImportError: = /usr/obj/DESTDIRs/main-CA7-chroot/usr/local/lib/python3.9/site-packages/cr= yptography/hazmat/bindings/_openssl.abi3.so: Undefined symbol = "ERR_GET_FUNC" >>>>=20 >>>> It is possible that this is related to some oddities of my >>>> context for this. But I figured I'd ask the general question >>>> anyway. >>>>=20 >>>=20 >>> No! The problem is that Python is calling an openssl 1.X function >>> which is dropped in Opensss 3.X >>>=20 >>> Python nedds to fix that issue. >>=20 >> Well: >>=20 >> # strings = /usr/obj/DESTDIRs/main-CA7-chroot/usr/local/lib/python3.9/site-packages/cr= yptography/hazmat/bindings/_openssl.abi3.so | grep -i "3\.[0-9]*\.[0-9]" >> OpenSSL 3.0.9 30 May 2023 >> 3.4.8 >>=20 >> =46rom what I read, 3.4.8 is too old and is known to have this issue = and this >> was fixed in a later version. I see references to "cryptography" = needing to >> be "at least 35.0.0 for OpenSSL 3.0 support" instead of "3.4.8" as = one place >> put it. >>=20 >> I've no clue of the details for python3.9 vs. python3.10 or = python3.11 for >> containing a sufficiently modern "cryptography" already in FreeBSD = ports >> (vs. not). But this may be more of a port-update issue than an = up-stream >> python issue -- or possibly just a "use python 3.? or later" issue = for >> some value for "?". >>=20 >=20 > 35.0.0 of cryptography dates back to 2021-09-29. > Current for cryptography is 41.0.1 (2023-06-01). > It claims: "It supports Python 3.7+ and PyPy3 > 7.3.10+." >=20 > security/py-cryptography is at 3.4.8 (2021-08-24) > for py39-cryptography and is, in-part, a FreeBSD > ports issue as far as I can tell. >=20 > Looking, it seems it is at 3.4.8 for all @${PY_FLAVOR} > instances. So trying python310 or python311 might > well do no good for openssl 3.0 compatibility if they > use security/py-cryptography . >=20 > (Note: I build my own ports via poudriere-devel .) py-cryptography in ports doesn=E2=80=99t support OpenSSL 3. Please see = this issue for more details: = https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D254853 = . Thanks, -Enji --Apple-Mail=_F141E58F-86ED-467D-8608-D26EE903AF4A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Jul 10, 2023, at 3:27 PM, Mark Millard <marklmi@yahoo.com> = wrote:

On Jul 10, 2023, at 15:03, Mark Millard <marklmi@yahoo.com> wrote:

On = Jul 10, 2023, at 11:42, The Doctor <doctor@doctor.nl2k.ab.ca> wrote:

On Mon, Jul 10, 2023 at = 08:56:22AM -0700, Mark Millard wrote:
The subject line's question was prompted by
. . ./hazmat/bindings/_openssl.abi3.so related notices
in a kyua report:

# kyua report = --verbose = --results-file=3Dusr_obj_DESTDIRs_main-CA7-chroot_usr_tests.20230710-06463= 2-752785 2>&1 | grep "Undefined symbol" | sort -u
+ImportError: = /usr/obj/DESTDIRs/main-CA7-chroot/usr/local/lib/python3.9/site-packages/cr= yptography/hazmat/bindings/_openssl.abi3.so: Undefined symbol = "ERR_GET_FUNC"
ImportError: = /usr/local/lib/python3.9/site-packages/cryptography/hazmat/bindings/_opens= sl.abi3.so: Undefined symbol "ERR_GET_FUNC"
ImportError: = /usr/obj/DESTDIRs/main-CA7-chroot/usr/local/lib/python3.9/site-packages/cr= yptography/hazmat/bindings/_openssl.abi3.so: Undefined symbol = "ERR_GET_FUNC"

It is possible that this is = related to some oddities of my
context for this. But I = figured I'd ask the general question
anyway.


No! The problem is = that Python is calling an openssl 1.X function
which is = dropped in Opensss 3.X

Python nedds to fix = that issue.

Well:

# strings = /usr/obj/DESTDIRs/main-CA7-chroot/usr/local/lib/python3.9/site-packages/cr= yptography/hazmat/bindings/_openssl.abi3.so | grep -i = "3\.[0-9]*\.[0-9]"
OpenSSL 3.0.9 30 May 2023
3.4.8

=46rom what I read, 3.4.8 = is too old and is known to have this issue and this
was = fixed in a later version. I see references to "cryptography" needing = to
be "at least 35.0.0 for OpenSSL 3.0 support" instead of = "3.4.8" as one place
put it.

I've no clue of the details for python3.9 vs. python3.10 or = python3.11 for
containing a sufficiently modern = "cryptography" already in FreeBSD ports
(vs. not). But = this may be more of a port-update issue than an up-stream
python issue -- or possibly just a "use python 3.? or later" = issue for
some value for "?".


35.0.0 of cryptography dates back to 2021-09-29.
Current for cryptography is = 41.0.1 (2023-06-01).
It claims: "It supports Python 3.7+ and PyPy3
7.3.10+."

security/py-cryptography is at = 3.4.8 (2021-08-24)
for py39-cryptography and is, in-part, a FreeBSD
ports issue as far as I can = tell.

Looking, it = seems it is at 3.4.8 for all @${PY_FLAVOR}
instances. So trying python310 or python311 might
well do no good for openssl 3.0 = compatibility if they
use security/py-cryptography .

(Note: I build my own ports via poudriere-devel .)

py-cryptography in ports doesn=E2=80=99t support OpenSSL 3. = Please see this issue for more details: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D254853&= nbsp;.
Thanks,
-Enji
= --Apple-Mail=_F141E58F-86ED-467D-8608-D26EE903AF4A-- --Apple-Mail=_40E607B9-C423-4B13-9671-CE0EE13D7600 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEtvtxN6kOllEF3nmX5JFNMZeDGN4FAmSvXucACgkQ5JFNMZeD GN4zIxAAqa8iaOp2B/6mI1PJ0ELGfEzkndr2o3KcqIQ4yCedoJ8DDz2JF40k1YT7 7D/Hx6oKLsUTivdV/uTQZaJgOV/EehRMP+I5i7iRcsWXPuOFWc7GGo+8ozBqWCHU tOYvDLn0Dr/nye3I2jFI9Cp+jSt2vsOZheVvdH7JvcyxCI/BxPI+qhfaAMn4r5dH OcAKTB5zQa83w5RrnuHtdUejHPtkY9vJayuiWDKE6DUz+hkd9FUZYK8hwi9tCO+E rUrY3HHoBqzTB+ecVKsUTIMGM7lVWnli2WWZAIgEy/ATL4MGSEsh/k0bZWJjD5uB 8m97jBWbIrNprIb6btMWXCotN2J/2dWCLkN9qY5ZYb4ObpKXr9AtgLOirOM8dLE0 FqBl67H2p/lxgfMn2K5V3stiF/vZufq39je2vcliPhvmp1a8P8uRL+RaIRZltjpd TaP1mwgKTZeJGQ2XPginUK/DMB3WpeNpTIFpxU16aP/+VlPrTBFSBFg4V1NJv82v bg2T+QFWBynDxDB146A8PmRj2fiB8MjZ0VNDYKqZnnWcQ8/5Jl6xHzcAwHDrur81 4eAHtIGIZWFww1l2tVbqf5pj/AriUydRK3DHS4G8vNIRue6Bd4A9t38aB/jh2DN5 +TkaFjSndqq5+yJnFYHdEu/vBDPF661DKsR+7r2dMJslger2D3o= =3Own -----END PGP SIGNATURE----- --Apple-Mail=_40E607B9-C423-4B13-9671-CE0EE13D7600--