[Pkg-sssd-devel] Bug#1001476: sssd: openssl conf incompatible with openssl 3.0

Steve Langasek steve.langasek at canonical.com
Fri Dec 10 18:44:05 GMT 2021


Package: sssd
Version: 2.6.1-1
Severity: important
Tags: patch
User: ubuntu-devel at lists.ubuntu.com
Usertags: origin-ubuntu jammy ubuntu-patch

Dear maintainers,

Ubuntu has transitioned to OpenSSL 3, which has revealed an incompatibility
between OpenSSL 3.0 and one of the sssd autopkgtests due to use of an
invalid 'RANDFILE' setting:

[...]
Cannot write random bytes:
40E74CDBE07F0000:error:1200007A:random number generator:RAND_write_file:Not a regular file:../crypto/rand/randfile.c:190:Filename=/dev/urandom
[...]

  (https://autopkgtest.ubuntu.com/results/autopkgtest-jammy/jammy/amd64/s/sssd/20211123_115512_c7315@/log.gz)

The attached patch addresses this, and lets the tests pass with OpenSSL 3,
which is currently in Debian experimental.

Cheers,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                   https://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
diff -Nru sssd-2.6.1/debian/tests/util sssd-2.6.1/debian/tests/util
--- sssd-2.6.1/debian/tests/util	2021-11-12 03:31:25.000000000 -0800
+++ sssd-2.6.1/debian/tests/util	2021-12-09 03:14:56.000000000 -0800
@@ -41,7 +41,6 @@
     local cnf="/etc/ldap/openssl.cnf"
 
     cat > "$cnf" <<EOF
-RANDFILE                = /dev/urandom
 [ req ]
 default_bits            = 1024
 default_keyfile         = privkey.pem


More information about the Pkg-sssd-devel mailing list