Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Cherry 4.0.x]: Explicitly initialize ssl #1674

Open
wants to merge 2 commits into
base: 4.0.x
Choose a base branch
from

Conversation

mender-test-bot
Copy link

Cherry pick of PR: #1673
For you :)

Ticket: None

Signed-off-by: Daniel Skinstad Drabitzius <[email protected]>
(cherry picked from commit a623641)
From the OpenSSL man pages:
Numerous internal OpenSSL functions call OPENSSL_init_ssl().
Therefore, in order to perform nondefault initialisation,
OPENSSL_init_ssl() MUST be called by application code prior to any other OpenSSL function calls.
See: https://docs.openssl.org/3.3/man3/OPENSSL_init_ssl/#description

This fixes errors where e.g. the openssl config configures ssl_conf,
which requires ssl to be initialized.

Ticket: MEN-7549
Changelog: Fix error while loading OpenSSL config file, by explicitly
initializing the SSL context prior to loading. Without the explicit
initialisation of SSL, the config might not be properly loaded if e.g.
it has sections specifying ssl settings. This was the case with the
example configuration for OpenSSL 1.1.1w from Debian Bullseye.

Signed-off-by: Daniel Skinstad Drabitzius <[email protected]>
(cherry picked from commit 4a3d82b)
@mender-test-bot
Copy link
Author

mender-test-bot commented Oct 4, 2024

Merging these commits will result in the following changelog entries:

Changelogs

mender (cherry-4.0.x-load-conf)

New changes in mender since 4.0.x:

Bug Fixes
  • Fix error while loading OpenSSL config file, by explicitly
    initializing the SSL context prior to loading. Without the explicit
    initialisation of SSL, the config might not be properly loaded if e.g.
    it has sections specifying ssl settings. This was the case with the
    example configuration for OpenSSL 1.1.1w from Debian Bullseye.
    (MEN-7549)

@mender-test-bot
Copy link
Author

@mender-test-bot, Let me know if you want to start the integration pipeline by mentioning me and the command "start pipeline".


my commands and options

You can trigger a pipeline on multiple prs with:

  • mentioning me and start pipeline --pr mender/127 --pr mender-connect/255

You can start a fast pipeline, disabling full integration tests with:

  • mentioning me and start pipeline --fast

You can trigger GitHub->GitLab branch sync with:

  • mentioning me and sync

You can cherry pick to a given branch or branches with:

  • mentioning me and:
 cherry-pick to:
 * 1.0.x
 * 2.0.x

@danielskinstad
Copy link
Contributor

@mender-test-bot start pipeline

@mender-test-bot
Copy link
Author

Hello 😺 I created a pipeline for you here: Pipeline-1481381941

Build Configuration Matrix

Key Value
AUDITLOGS_REV 3.2.x
BUILD_BEAGLEBONEBLACK true
BUILD_CLIENT true
BUILD_QEMUX86_64_BIOS_GRUB true
BUILD_QEMUX86_64_BIOS_GRUB_GPT true
BUILD_QEMUX86_64_UEFI_GRUB true
BUILD_VEXPRESS_QEMU true
BUILD_VEXPRESS_QEMU_FLASH true
BUILD_VEXPRESS_QEMU_UBOOT_UEFI_GRUB true
CREATE_ARTIFACT_WORKER_REV 1.4.x
DEPLOYMENTS_ENTERPRISE_REV 4.6.x
DEPLOYMENTS_REV 4.6.x
DEVICEAUTH_ENTERPRISE_REV 3.6.x
DEVICEAUTH_REV 3.6.x
DEVICECONFIG_REV 1.4.x
DEVICECONNECT_REV 1.5.x
DEVICEMONITOR_REV 1.5.x
GENERATE_DELTA_WORKER_REV 1.1.x
GUI_REV 3.7.x
INTEGRATION_REV 3.7.x
INVENTORY_ENTERPRISE_REV 4.4.x
INVENTORY_REV 4.4.x
IOT_MANAGER_REV 1.3.x
MENDER_ARTIFACT_REV 3.11.x
MENDER_BINARY_DELTA_REV 1.4.x
MENDER_CLI_REV 1.12.x
MENDER_CONFIGURE_MODULE_REV 1.1.x
MENDER_CONNECT_REV 2.2.x
MENDER_CONVERT_REV 4.2.x
MENDER_GATEWAY_REV 1.2.x
MENDER_REV pull/1674/head
MENDER_SETUP_REV 1.0.x
MENDER_SNAPSHOT_REV 1.0.x
META_MENDER_REV kirkstone
META_OPENEMBEDDED_REV kirkstone
META_RASPBERRYPI_REV kirkstone
MONITOR_CLIENT_REV 1.3.x
MTLS_AMBASSADOR_REV 1.3.x
POKY_REV kirkstone
RUN_BACKEND_INTEGRATION_TESTS true
RUN_INTEGRATION_TESTS true
TENANTADM_REV 4.1.x
TEST_QEMUX86_64_BIOS_GRUB true
TEST_QEMUX86_64_BIOS_GRUB_GPT true
TEST_QEMUX86_64_UEFI_GRUB true
TEST_VEXPRESS_QEMU true
TEST_VEXPRESS_QEMU_FLASH true
TEST_VEXPRESS_QEMU_UBOOT_UEFI_GRUB true
USERADM_ENTERPRISE_REV 1.22.x
USERADM_REV 1.22.x
WORKFLOWS_ENTERPRISE_REV 2.6.x
WORKFLOWS_REV 2.6.x

@danielskinstad danielskinstad self-requested a review October 4, 2024 09:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants