MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Tue, 09 Aug 2022 11:03:28 +0200
Message-Id: <CM1DKYJNC33S.69TPBSC5OBOT@sumire>
Cc: <~alpine/devel@lists.alpinelinux.org>
Subject: Re: OpenSSL 3 pushed to git master
From: "alice" <alice@ayaya.dev>
To: "Nico Schottelius" <nico.schottelius@ungleich.ch>,
 =?utf-8?q?S=C3=B6ren_Tempel?= <soeren@soeren-tempel.net>
References: <20220803105631.77d1cc2c@ncopa-desktop.lan>
 <87iln2cxo3.fsf@ungleich.ch> <3SRKG6BGFL7KR.20SII8UE439WK@8pit.net>
 <87h72l7qy5.fsf@ungleich.ch>
In-Reply-To: <87h72l7qy5.fsf@ungleich.ch>

On Tue Aug 9, 2022 at 10:34 AM CEST, Nico Schottelius wrote:
>
> Hey S=C3=B6ren,
>
> thanks a lot for the quick fix. I have just upgraded to 9.01-r2 and it
> indeed fixes the problem, much appreciated - I can get back to work!
note that the next upgrade to -r3 has this reverted again (back to
openssl3)- you would need to edit the openssl.cnf after that.

>
> Sunny greetings from Switzerland,
>
> Nico
>
> S=C3=B6ren Tempel <soeren@soeren-tempel.net> writes:
>
> > Hi Nico,
> >
> > I had a similar issue with isync recently where it would compile fine
> > with OpenSSL 3 but ran into connection failures at run-time. I modified
> > the openconnect aport to use OpenSSL 1.1 for now. This should hopefully
> > fix your issue. If not, please open an issue in GitLab.
> >
> > See: https://git.alpinelinux.org/aports/commit/?id=3D0141a80a906bc45967=
0cd698dd452ee51a1b1f4a
> >
> > Greetings,
> > S=C3=B6ren
> >
> > Nico Schottelius <nico.schottelius@ungleich.ch> wrote:
> >>
> >> Hey Nate,
> >>
> >> is it possible that this upgrade broken openconnect?
> >>
> >> Since an apk upgrade -a on edge I am facing this one:
> >>
> >> ----------------------------------------------------------------------=
----------
> >> POST https://portal.somewhere.com/global-protect/prelogin.esp?tmp=3Dtm=
p&clientVer=3D4100&clientos=3DLinux
> >> Connected to [....]:443
> >> SSL negotiation with portal.techcorpapps.com
> >> SSL connection failure
> >> 9069B3F2667F0000:error:0A000152:SSL routines:final_renegotiate:unsafe =
legacy renegotiation disabled:ssl/statem/extensions.c:879:
> >> Failed to open HTTPS connection to portal.techcorpapps.com
> >> Failed to complete authentication
> >> ----------------------------------------------------------------------=
----------
> >>
> >> Best,
> >>
> >> Nico
> >>
> >>
> >> Natanael Copa <ncopa@alpinelinux.org> writes:
> >>
> >> > Hi!
> >> >
> >> > I have pushed openssl3 to git master.
> >> >
> >> > Majority of the main and community packages built fine in my x86_64 =
LXC.
> >> >
> >> > I was able to build approx half of the testing packages as well, but
> >> > not all.
> >> >
> >> > There might be some packages that needs fixes still and it might tak=
e
> >> > another day before community repo is done.
> >> >
> >> > Sorry for the inconvenience.
> >> >
> >> > -nc
> >>
> >>
> >> --
> >> Sustainable and modern Infrastructures by ungleich.ch
>
>
> --
> Sustainable and modern Infrastructures by ungleich.ch