[Pkg-xen-devel] Bug#1041533: Root Cause is probably related to a linking issue
Thomas Keppler
winfr34k at gmail.com
Sat Aug 3 21:03:41 BST 2024
found 1041533 4.17.3+10-g091466ba55-1~deb12u1
Hello all,
This bug also affects me, with the same symptoms and setup that were described earlier:
root at hypervisor:~# cat /var/log/xen/qemu-dm-vm.log
xen-qemu-system-i386: -vnc :0,password=on,to=99: Cipher backend does not support DES algorithm
root at hypervisor:~# grep vnc /etc/xen/vm
vnc = "1"
vncconsole = "1"
vnclisten = ""
vncpasswd = "some-password"
Searching for as to why this happens, I think I found the root cause: https://gitlab.com/qemu-project/qemu/-/issues/1158
Sure enough, "regular" qemu-system-x86_64 includes both GnuTLS and Nettle:
root at hypervisor:~# ldd /usr/bin/qemu-system-x86_64 | grep -e crypt -e tls -e nettle
libgnutls.so.30 => /lib/x86_64-linux-gnu/libgnutls.so.30 (0x00007f9e0b400000)
libnettle.so.8 => /lib/x86_64-linux-gnu/libnettle.so.8 (0x00007f9e0b072000)
libcrypto.so.3 => /lib/x86_64-linux-gnu/libcrypto.so.3 (0x00007f9e0a000000)
But Xen's xen-qemu-system-i386 does not:
root at hypervisor:~# ldd /usr/libexec/xen-qemu-system-i386 | grep -e crypt -e tls -e nettle
libcrypto.so.3 => /lib/x86_64-linux-gnu/libcrypto.so.3 (0x00007f63b1600000)
Both versions are the same, though:
root at hypervisor:~# qemu-system-x86_64 --version
QEMU emulator version 7.2.11 (Debian 1:7.2+dfsg-7+deb12u6)
Copyright (c) 2003-2022 Fabrice Bellard and the QEMU Project developers
root at hypervisor:~# /usr/libexec/xen-qemu-system-i386 --version
QEMU emulator version 7.2.11 (Debian 1:7.2+dfsg-7+deb12u6)
Copyright (c) 2003-2022 Fabrice Bellard and the QEMU Project developers
This leads me to believe that if xen-qemu-system-i386 were to be linked with at least one of the mentioned DES providers, this regression would be fixed.
Best regards,
Thomas
More information about the Pkg-xen-devel
mailing list