Precedence: list
MIME-Version: 1.0
In-Reply-To: <20180209175920.9N6Ca%steffen@sdaoden.eu>
References: <CA+T2pCGFeh30aEi43hAvJ3yoHBijABy_U62wfjhVmf3FmbNUUg@mail.gmail.com>
 <20180209183838.6c453793@ncopa-macbook.copa.dup.pw> <20180209175920.9N6Ca%steffen@sdaoden.eu>
From: William Pitcock <nenolod@dereferenced.org>
Date: Fri, 9 Feb 2018 14:07:28 -0600
Message-ID: <CA+T2pCHrHnShuZT+Psb0L3ajQg-65OwVRqmwxZFoUT-xALbfPg@mail.gmail.com>
Subject: Re: [alpine-devel] Proposed change: openssl 1.1 as default system
 openssl implementation
To: Natanael Copa <ncopa@alpinelinux.org>, William Pitcock <nenolod@dereferenced.org>, 
	alpine-dev <alpine-devel@lists.alpinelinux.org>
Content-Type: text/plain; charset="UTF-8"

Hello,

On Fri, Feb 9, 2018 at 11:59 AM, Steffen Nurpmeso <steffen@sdaoden.eu> wrote:
> Natanael Copa <ncopa@alpinelinux.org> wrote:
>  |On Thu, 8 Feb 2018 11:23:26 -0600
>  |William Pitcock <nenolod@dereferenced.org> wrote:
>  |
>  |> libressl promised to retain compatibility with 1.0.1g APIs, but has
>  |> failed to do so.  As such, there is an increasing workload to keep
>  |> packages compatible with libressl as it evolves.  Therefore, it is
>  |> obviously not truly a suitable provider for the openssl package, and
>  |> we should switch back to proper openssl as the default.  We will
>  |> however retain libressl for packages which require it (for example,
>  |> ones using the new libtls APIs).
>  |>
>  |> If there is no objection to this proposed change, I intend to do the
>  |> swap next week.
>  |
>  |I'd like to wait with the switch til we fully solved the kernel issues
>  |in stable branches.
>
> I live in fear of updating, especially the server, i get:
>
>   00:00:13.070040 emR3Debug: rc=VERR_PGM_INVALID_CR3_ADDR
>   00:00:14.078859 Changing the VM state from 'RUNNING' to 'GURU_MEDITATION'.
>
> on an old VirtualBox with -vanilla 4.14.17.

Out of curiosity, do you get that with KPTI disabled?  Boot with nopti
command-line option.
Smells like a regression...

William


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---