References: <20220803105631.77d1cc2c@ncopa-desktop.lan>
 <87iln2cxo3.fsf@ungleich.ch> <3SRKG6BGFL7KR.20SII8UE439WK@8pit.net>
User-agent: mu4e 1.7.27; emacs 28.1
From: Nico Schottelius <nico.schottelius@ungleich.ch>
To: =?utf-8?Q?S=C3=B6ren?= Tempel <soeren@soeren-tempel.net>
Cc: Nico Schottelius <nico.schottelius@ungleich.ch>,
 ~alpine/devel@lists.alpinelinux.org
Subject: Re: OpenSSL 3 pushed to git master
Date: Tue, 09 Aug 2022 10:34:51 +0200
In-reply-to: <3SRKG6BGFL7KR.20SII8UE439WK@8pit.net>
Message-ID: <87h72l7qy5.fsf@ungleich.ch>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable


Hey S=C3=B6ren,

thanks a lot for the quick fix. I have just upgraded to 9.01-r2 and it
indeed fixes the problem, much appreciated - I can get back to work!

Sunny greetings from Switzerland,

Nico

S=C3=B6ren Tempel <soeren@soeren-tempel.net> writes:

> Hi Nico,
>
> I had a similar issue with isync recently where it would compile fine
> with OpenSSL 3 but ran into connection failures at run-time. I modified
> the openconnect aport to use OpenSSL 1.1 for now. This should hopefully
> fix your issue. If not, please open an issue in GitLab.
>
> See: https://git.alpinelinux.org/aports/commit/?id=3D0141a80a906bc459670c=
d698dd452ee51a1b1f4a
>
> Greetings,
> S=C3=B6ren
>
> Nico Schottelius <nico.schottelius@ungleich.ch> wrote:
>>
>> Hey Nate,
>>
>> is it possible that this upgrade broken openconnect?
>>
>> Since an apk upgrade -a on edge I am facing this one:
>>
>> ------------------------------------------------------------------------=
--------
>> POST https://portal.somewhere.com/global-protect/prelogin.esp?tmp=3Dtmp&=
clientVer=3D4100&clientos=3DLinux
>> Connected to [....]:443
>> SSL negotiation with portal.techcorpapps.com
>> SSL connection failure
>> 9069B3F2667F0000:error:0A000152:SSL routines:final_renegotiate:unsafe le=
gacy renegotiation disabled:ssl/statem/extensions.c:879:
>> Failed to open HTTPS connection to portal.techcorpapps.com
>> Failed to complete authentication
>> ------------------------------------------------------------------------=
--------
>>
>> Best,
>>
>> Nico
>>
>>
>> Natanael Copa <ncopa@alpinelinux.org> writes:
>>
>> > Hi!
>> >
>> > I have pushed openssl3 to git master.
>> >
>> > Majority of the main and community packages built fine in my x86_64 LX=
C.
>> >
>> > I was able to build approx half of the testing packages as well, but
>> > not all.
>> >
>> > There might be some packages that needs fixes still and it might take
>> > another day before community repo is done.
>> >
>> > Sorry for the inconvenience.
>> >
>> > -nc
>>
>>
>> --
>> Sustainable and modern Infrastructures by ungleich.ch


--
Sustainable and modern Infrastructures by ungleich.ch