2025. 02. 13. 15:43 keltezéssel, Zoltan Boszormenyi via lists.openembedded.org
írta:
2025. 02. 13. 15:20 keltezéssel, Zoltan Boszormenyi via lists.openembedded.org
írta:
2025. 02. 13. 14:36 keltezéssel, Mathieu Dubois-Briand írta:
On Wed Feb 12, 2025 at 5:35 AM CET, Zoltán Böszörményi wrote:
This ships a crypto policy file for rpm-sequoia.
Signed-off-by: Zoltán Böszörményi <zbos...@gmail.com>
---
Hi Zoltán,
I believe we have a new issue with this version:
| python/build-crypto-policies.py --reloadcmds policies output
| /tmp/tmpqvyryz80: line 5: Bad configuration option: pubkeyacceptedalgorithms
| /tmp/tmpqvyryz80: line 6: Bad configuration option:
hostbasedacceptedalgorithms
| /tmp/tmpqvyryz80: line 8: Bad configuration option: requiredrsasize
| /tmp/tmpqvyryz80: terminating, 3 bad configuration options
| There is an error in OpenSSH server generated policy
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/3/builds/1027/steps/11/logs/stdio
Can you have a look at this error please?
I tested the recipe on Fedora 41 with:
* nss 3.107.0 installed with /usr/bin/nss-policy-check present, and
* faking uninstalling it by renaming /usr/bin/nss-policy-check
Both worked.
Some of your build hosts where nss was not installed complained
about executing nss-policy-check unconditionally, which is now fixed.
I think this is on a build host with a very old nss version installed.
Can you uninstall it?
I found an alternative solution but it involves patching out 0
most of the policy generators:
<bad patch>
Wrong diagnosis.
It only happens for openssh and openssh server configs.
And it should be with with export OLD_OPENSSH=1.
Is it okay if I re-send only the first patch in the series?
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#211345):
https://lists.openembedded.org/g/openembedded-core/message/211345
Mute This Topic: https://lists.openembedded.org/mt/111137778/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
