Hi,
I've encountered two different issues with Gambits OpenSSL use.
First issue is that it doesn't seem to work with LibreSSL. I tested this on my OpenBSD-current and Gambit compiles just fine but tls support doesn't seem to work: $ gsi Gambit v4.9.0
(make-tls-context)
*** ERROR IN (console)@1.1 -- (make-tls-context) 1>
Any methods to get further details on what error happened here? LibreSSL should have API compatibility with OpenSSL 1.0.1. Which API the Gambit uses? I asked around on voidlinux IRC and same issue seems to be happening there as well. Void Linux also uses LibreSSL.
Another issue I noticed that the Gambit fails to compile at all when its configured with '--enable-openssl' on system using OpenSSL 1.1.0. I tested it with Slackware64-current and it broke on compilation failing to find some SSL context structure. eems there are API changes in later OpenSSL versions which Gambit can't handle currently. Could the docs be updated so that those include which OpenSSL versions should work.
Timo
Afficher les réponses par date
timo.myyra@bittivirhe.fi (Timo Myyrä) writes:
Hi,
I've encountered two different issues with Gambits OpenSSL use.
First issue is that it doesn't seem to work with LibreSSL. I tested this on my OpenBSD-current and Gambit compiles just fine but tls support doesn't seem to work: $ gsi Gambit v4.9.0
(make-tls-context)
*** ERROR IN (console)@1.1 -- (make-tls-context) 1>
Any methods to get further details on what error happened here? LibreSSL should have API compatibility with OpenSSL 1.0.1. Which API the Gambit uses? I asked around on voidlinux IRC and same issue seems to be happening there as well. Void Linux also uses LibreSSL.
Another issue I noticed that the Gambit fails to compile at all when its configured with '--enable-openssl' on system using OpenSSL 1.1.0. I tested it with Slackware64-current and it broke on compilation failing to find some SSL context structure. eems there are API changes in later OpenSSL versions which Gambit can't handle currently. Could the docs be updated so that those include which OpenSSL versions should work.
Timo _______________________________________________ Gambit-list mailing list Gambit-list@iro.umontreal.ca https://mailman.iro.umontreal.ca/cgi-bin/mailman/listinfo/gambit-list
Ah, seems the latter issue is already fixed in the master branch, backported the openssl 1.1.0 diff from it to Slackware and it fixed tls operations on it.
While testing the diff I noticed it seems to have small flaw, its comparing probably wrong arguments:
https://github.com/gambit/gambit/blob/master/lib/os_io.c#L4205 That line should probably be "if (bp == NULL || bg == NULL)".
Haven't made any progress on finding whats breaking the LibreSSL though.
timo
Thank you for your interest in the SSL support. Could you please submit an issue on the github repository so we can keep track of this issue?
Marc
On Sep 19, 2018, at 6:41 AM, Timo Myyrä timo.myyra@bittivirhe.fi wrote:
timo.myyra@bittivirhe.fi (Timo Myyrä) writes:
Hi,
I've encountered two different issues with Gambits OpenSSL use.
First issue is that it doesn't seem to work with LibreSSL. I tested this on my OpenBSD-current and Gambit compiles just fine but tls support doesn't seem to work: $ gsi Gambit v4.9.0
(make-tls-context)
*** ERROR IN (console)@1.1 -- (make-tls-context) 1>
Any methods to get further details on what error happened here? LibreSSL should have API compatibility with OpenSSL 1.0.1. Which API the Gambit uses? I asked around on voidlinux IRC and same issue seems to be happening there as well. Void Linux also uses LibreSSL.
Another issue I noticed that the Gambit fails to compile at all when its configured with '--enable-openssl' on system using OpenSSL 1.1.0. I tested it with Slackware64-current and it broke on compilation failing to find some SSL context structure. eems there are API changes in later OpenSSL versions which Gambit can't handle currently. Could the docs be updated so that those include which OpenSSL versions should work.
Timo _______________________________________________ Gambit-list mailing list Gambit-list@iro.umontreal.ca https://mailman.iro.umontreal.ca/cgi-bin/mailman/listinfo/gambit-list
Ah, seems the latter issue is already fixed in the master branch, backported the openssl 1.1.0 diff from it to Slackware and it fixed tls operations on it.
While testing the diff I noticed it seems to have small flaw, its comparing probably wrong arguments:
https://github.com/gambit/gambit/blob/master/lib/os_io.c#L4205 That line should probably be "if (bp == NULL || bg == NULL)".
Haven't made any progress on finding whats breaking the LibreSSL though.
timo _______________________________________________ Gambit-list mailing list Gambit-list@iro.umontreal.ca https://mailman.iro.umontreal.ca/cgi-bin/mailman/listinfo/gambit-list
-
Marc Feeley -
timo.myyra＠bittivirhe.fi