[gambit-list] Problems with Gambit OpenSSL support

Marc Feeley feeley at iro.umontreal.ca
Wed Sep 19 08:33:58 EDT 2018


Thank you for your interest in the SSL support.  Could you please submit an issue on the github repository so we can keep track of this issue?

Marc



> On Sep 19, 2018, at 6:41 AM, Timo Myyrä <timo.myyra at bittivirhe.fi> wrote:
> 
> timo.myyra at bittivirhe.fi (Timo Myyrä) writes:
> 
>> Hi,
>> 
>> I've encountered two different issues with Gambits OpenSSL use.
>> 
>> First issue is that it doesn't seem to work with LibreSSL. I tested this on my
>> OpenBSD-current and Gambit compiles just fine but tls support doesn't seem to work:
>> $ gsi
>> Gambit v4.9.0
>> 
>>> (make-tls-context)
>> *** ERROR IN (console)@1.1 -- 
>> (make-tls-context)
>> 1> 
>> 
>> Any methods to get further details on what error happened here? LibreSSL should
>> have API compatibility with OpenSSL 1.0.1. Which API the Gambit uses? I asked
>> around on voidlinux IRC and same issue seems to be happening there as
>> well. Void Linux also uses LibreSSL.
>> 
>> Another issue I noticed that the Gambit fails to compile at all when its
>> configured with '--enable-openssl' on system using OpenSSL 1.1.0. I tested it
>> with Slackware64-current and it broke on compilation failing to find some SSL
>> context structure. eems there are API changes in later OpenSSL versions which
>> Gambit can't handle currently. Could the docs be updated so that those include
>> which OpenSSL versions should work.
>> 
>> Timo
>> _______________________________________________
>> Gambit-list mailing list
>> Gambit-list at iro.umontreal.ca
>> https://mailman.iro.umontreal.ca/cgi-bin/mailman/listinfo/gambit-list
> 
> Ah, seems the latter issue is already fixed in the master branch, backported the
> openssl 1.1.0 diff from it to Slackware and it fixed tls operations on it.
> 
> While testing the diff I noticed it seems to have small flaw, its comparing
> probably wrong arguments:
> 
> https://github.com/gambit/gambit/blob/master/lib/os_io.c#L4205
> That line should probably be "if (bp == NULL || bg == NULL)".
> 
> Haven't made any progress on finding whats breaking the LibreSSL though.
> 
> timo
> _______________________________________________
> Gambit-list mailing list
> Gambit-list at iro.umontreal.ca
> https://mailman.iro.umontreal.ca/cgi-bin/mailman/listinfo/gambit-list




More information about the Gambit-list mailing list