1 |
commit: 3977e69c277db98074d31d713df2a3d37edc78ab |
2 |
Author: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> |
3 |
AuthorDate: Tue Oct 29 23:58:22 2019 +0000 |
4 |
Commit: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> |
5 |
CommitDate: Tue Oct 29 23:58:22 2019 +0000 |
6 |
URL: https://gitweb.gentoo.org/proj/mysql-extras.git/commit/?id=3977e69c |
7 |
|
8 |
Fix 20018_all_percona-server-8.0.16-fix-libressl-support.patch |
9 |
|
10 |
Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org> |
11 |
|
12 |
...ercona-server-8.0.16-fix-libressl-support.patch | 58 +--------------------- |
13 |
1 file changed, 1 insertion(+), 57 deletions(-) |
14 |
|
15 |
diff --git a/20018_percona-server-8.0.16-fix-libressl-support.patch b/20018_all_percona-server-8.0.16-fix-libressl-support.patch |
16 |
similarity index 76% |
17 |
rename from 20018_percona-server-8.0.16-fix-libressl-support.patch |
18 |
rename to 20018_all_percona-server-8.0.16-fix-libressl-support.patch |
19 |
index 5e7b24e..c54d7ae 100644 |
20 |
--- a/20018_percona-server-8.0.16-fix-libressl-support.patch |
21 |
+++ b/20018_all_percona-server-8.0.16-fix-libressl-support.patch |
22 |
@@ -1,29 +1,6 @@ |
23 |
-From da955a3a74c57688d33d845d5cb12cccf8004ff2 Mon Sep 17 00:00:00 2001 |
24 |
-From: root <root@××××××××××.box> |
25 |
-Date: Sat, 17 Aug 2019 00:15:49 +0200 |
26 |
-Subject: [PATCH 5/5] percona-server-8.0.16-fix-libressl-support |
27 |
- |
28 |
---- |
29 |
- cmake/ssl.cmake | 6 ++++-- |
30 |
- extra/libevent/openssl-compat.h | 5 ++++- |
31 |
- mysys_ssl/my_md5.cc | 2 +- |
32 |
- .../src/bindings/xcom/xcom/xcom_ssl_transport.c | 4 ++-- |
33 |
- plugin/x/client/xconnection_impl.cc | 4 ++-- |
34 |
- router/src/http/src/tls_client_context.cc | 2 +- |
35 |
- router/src/http/src/tls_context.cc | 6 +++++- |
36 |
- router/src/http/src/tls_server_context.cc | 3 ++- |
37 |
- sql-common/client.cc | 3 ++- |
38 |
- sql/mysqld.cc | 4 ++-- |
39 |
- sql/sys_vars.cc | 8 ++++---- |
40 |
- vio/viossl.cc | 4 ++-- |
41 |
- vio/viosslfactories.cc | 2 +- |
42 |
- 13 files changed, 32 insertions(+), 21 deletions(-) |
43 |
- |
44 |
-diff --git a/cmake/ssl.cmake b/cmake/ssl.cmake |
45 |
-index e93a12e0..06cd36ec 100644 |
46 |
--- a/cmake/ssl.cmake |
47 |
+++ b/cmake/ssl.cmake |
48 |
-@@ -313,12 +313,14 @@ MACRO (MYSQL_CHECK_SSL) |
49 |
+@@ -313,7 +313,8 @@ MACRO (MYSQL_CHECK_SSL) |
50 |
OPENSSL_FIX_VERSION "${OPENSSL_VERSION_NUMBER}" |
51 |
) |
52 |
ENDIF() |
53 |
@@ -33,15 +10,6 @@ index e93a12e0..06cd36ec 100644 |
54 |
ADD_DEFINITIONS(-DHAVE_TLSv13) |
55 |
ENDIF() |
56 |
IF(OPENSSL_INCLUDE_DIR AND |
57 |
- OPENSSL_LIBRARY AND |
58 |
-- CRYPTO_LIBRARY |
59 |
-+ CRYPTO_LIBRARY AND |
60 |
-+ OPENSSL_MAJOR_VERSION VERSION_GREATER_EQUAL "1" |
61 |
- ) |
62 |
- SET(OPENSSL_FOUND TRUE) |
63 |
- FIND_PROGRAM(OPENSSL_EXECUTABLE openssl |
64 |
-diff --git a/extra/libevent/openssl-compat.h b/extra/libevent/openssl-compat.h |
65 |
-index 69afc716..deb21d6a 100644 |
66 |
--- a/extra/libevent/openssl-compat.h |
67 |
+++ b/extra/libevent/openssl-compat.h |
68 |
@@ -24,7 +24,6 @@ static inline BIO_METHOD *BIO_meth_new(int type, const char *name) |
69 |
@@ -61,8 +29,6 @@ index 69afc716..deb21d6a 100644 |
70 |
+#endif |
71 |
+ |
72 |
#endif /* OPENSSL_COMPAT_H */ |
73 |
-diff --git a/mysys_ssl/my_md5.cc b/mysys_ssl/my_md5.cc |
74 |
-index 095fcb4e..0bdc885a 100644 |
75 |
--- a/mysys_ssl/my_md5.cc |
76 |
+++ b/mysys_ssl/my_md5.cc |
77 |
@@ -56,7 +56,7 @@ static void my_md5_hash(unsigned char *digest, unsigned const char *buf, |
78 |
@@ -74,8 +40,6 @@ index 095fcb4e..0bdc885a 100644 |
79 |
fips_mode = FIPS_mode(); |
80 |
#endif /* HAVE_WOLFSSL */ |
81 |
/* If fips mode is ON/STRICT restricted method calls will result into abort, |
82 |
-diff --git a/plugin/group_replication/libmysqlgcs/src/bindings/xcom/xcom/xcom_ssl_transport.c b/plugin/group_replication/libmysqlgcs/src/bindings/xcom/xcom/xcom_ssl_transport.c |
83 |
-index 67c151b2..6a18a717 100644 |
84 |
--- a/plugin/group_replication/libmysqlgcs/src/bindings/xcom/xcom/xcom_ssl_transport.c |
85 |
+++ b/plugin/group_replication/libmysqlgcs/src/bindings/xcom/xcom/xcom_ssl_transport.c |
86 |
@@ -297,7 +297,7 @@ error: |
87 |
@@ -96,8 +60,6 @@ index 67c151b2..6a18a717 100644 |
88 |
if (configure_ssl_fips_mode(ssl_fips_mode) != 1) { |
89 |
G_ERROR("Error setting the ssl fips mode"); |
90 |
goto error; |
91 |
-diff --git a/plugin/x/client/xconnection_impl.cc b/plugin/x/client/xconnection_impl.cc |
92 |
-index cab1836c..4ba28d8f 100644 |
93 |
--- a/plugin/x/client/xconnection_impl.cc |
94 |
+++ b/plugin/x/client/xconnection_impl.cc |
95 |
@@ -489,7 +489,7 @@ XError Connection_impl::get_ssl_error(const int error_id) { |
96 |
@@ -118,8 +80,6 @@ index cab1836c..4ba28d8f 100644 |
97 |
char err_string[OPENSSL_ERROR_LENGTH] = {'\0'}; |
98 |
if (set_fips_mode((int)m_context->m_ssl_config.m_ssl_fips_mode, err_string) != |
99 |
1) { |
100 |
-diff --git a/router/src/http/src/tls_client_context.cc b/router/src/http/src/tls_client_context.cc |
101 |
-index f9dff94d..ae7413b4 100644 |
102 |
--- a/router/src/http/src/tls_client_context.cc |
103 |
+++ b/router/src/http/src/tls_client_context.cc |
104 |
@@ -54,7 +54,7 @@ void TlsClientContext::verify(TlsVerify verify) { |
105 |
@@ -131,8 +91,6 @@ index f9dff94d..ae7413b4 100644 |
106 |
if (1 != SSL_CTX_set_ciphersuites(ssl_ctx_.get(), ciphers.c_str())) { |
107 |
throw TlsError("set-cipher-suites"); |
108 |
} |
109 |
-diff --git a/router/src/http/src/tls_context.cc b/router/src/http/src/tls_context.cc |
110 |
-index bae36860..2cdc3127 100644 |
111 |
--- a/router/src/http/src/tls_context.cc |
112 |
+++ b/router/src/http/src/tls_context.cc |
113 |
@@ -92,7 +92,7 @@ static constexpr int o11x_version(TlsVersion version) { |
114 |
@@ -167,8 +125,6 @@ index bae36860..2cdc3127 100644 |
115 |
case 0: |
116 |
return TlsVersion::AUTO; |
117 |
default: |
118 |
-diff --git a/router/src/http/src/tls_server_context.cc b/router/src/http/src/tls_server_context.cc |
119 |
-index 4f3fa39c..ecc97559 100644 |
120 |
--- a/router/src/http/src/tls_server_context.cc |
121 |
+++ b/router/src/http/src/tls_server_context.cc |
122 |
@@ -162,7 +162,8 @@ void TlsServerContext::init_tmp_dh(const std::string &dh_params) { |
123 |
@@ -181,8 +137,6 @@ index 4f3fa39c..ecc97559 100644 |
124 |
dh2048.reset(DH_get_2048_256()); |
125 |
#else |
126 |
/* |
127 |
-diff --git a/sql-common/client.cc b/sql-common/client.cc |
128 |
-index b6a253cc..2375bd19 100644 |
129 |
--- a/sql-common/client.cc |
130 |
+++ b/sql-common/client.cc |
131 |
@@ -7681,7 +7681,8 @@ int STDCALL mysql_options(MYSQL *mysql, enum mysql_option option, |
132 |
@@ -195,8 +149,6 @@ index b6a253cc..2375bd19 100644 |
133 |
char ssl_err_string[OPENSSL_ERROR_LENGTH] = {'\0'}; |
134 |
ENSURE_EXTENSIONS_PRESENT(&mysql->options); |
135 |
mysql->options.extension->ssl_fips_mode = *(uint *)arg; |
136 |
-diff --git a/sql/mysqld.cc b/sql/mysqld.cc |
137 |
-index 22364edc..7b066343 100644 |
138 |
--- a/sql/mysqld.cc |
139 |
+++ b/sql/mysqld.cc |
140 |
@@ -4881,7 +4881,7 @@ static int init_thread_environment() { |
141 |
@@ -217,8 +169,6 @@ index 22364edc..7b066343 100644 |
142 |
char ssl_err_string[OPENSSL_ERROR_LENGTH] = {'\0'}; |
143 |
int ret_fips_mode = set_fips_mode(opt_ssl_fips_mode, ssl_err_string); |
144 |
if (ret_fips_mode != 1) { |
145 |
-diff --git a/sql/sys_vars.cc b/sql/sys_vars.cc |
146 |
-index 5d7f3555..334684d2 100644 |
147 |
--- a/sql/sys_vars.cc |
148 |
+++ b/sql/sys_vars.cc |
149 |
@@ -4405,7 +4405,7 @@ static Sys_var_ulong Sys_max_execution_time( |
150 |
@@ -257,8 +207,6 @@ index 5d7f3555..334684d2 100644 |
151 |
ON_UPDATE(update_fips_mode), |
152 |
#else |
153 |
ON_UPDATE(NULL), |
154 |
-diff --git a/vio/viossl.cc b/vio/viossl.cc |
155 |
-index d69119b3..5fb7c883 100644 |
156 |
--- a/vio/viossl.cc |
157 |
+++ b/vio/viossl.cc |
158 |
@@ -507,7 +507,7 @@ static int ssl_do(struct st_VioSSLFd *ptr, Vio *vio, long timeout, |
159 |
@@ -279,8 +227,6 @@ index d69119b3..5fb7c883 100644 |
160 |
DBUG_PRINT("info", (" %d: %s\n", c->id, c->name)); |
161 |
#else /* OPENSSL_VERSION_NUMBER < 0x10100000L */ |
162 |
DBUG_PRINT("info", |
163 |
-diff --git a/vio/viosslfactories.cc b/vio/viosslfactories.cc |
164 |
-index ea79ad1b..8ed961d1 100644 |
165 |
--- a/vio/viosslfactories.cc |
166 |
+++ b/vio/viosslfactories.cc |
167 |
@@ -429,7 +429,7 @@ void ssl_start() { |
168 |
@@ -292,6 +238,4 @@ index ea79ad1b..8ed961d1 100644 |
169 |
/** |
170 |
Set fips mode in openssl library, |
171 |
When we set fips mode ON/STRICT, it will perform following operations: |
172 |
--- |
173 |
-2.22.1 |