Comment 8 for bug 1705521

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to openstack-ansible (master)

Reviewed: https://review.openstack.org/486173
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible/commit/?id=9220732958c2d0303e5a4b77a484a412ef6d605b
Submitter: Jenkins
Branch: master

commit 9220732958c2d0303e5a4b77a484a412ef6d605b
Author: Markos Chandras <email address hidden>
Date: Fri Jul 21 17:07:00 2017 +0100

    group_vars: repo_all: Always build cryptography from source

    cryptography may bundle openssl in the wheel and that causes symbol
    conflicts if a different openssl is provided by the distribution.
    As such, it's probably safer to re-build cryptography ourselves just
    to be sure that the correct distro libraries are used. This has been
    addressed in openstack-ansible-tests/test-vars.yaml
    (https://review.openstack.org/#/c/486580/) to fix the CI tests but the
    problem is also present on regular deployments so we set it in the
    group_variables for the repo_all group of hosts so it's built from
    source in the wheel repository.

    Related-Bug: 1705521
    Link: https://github.com/pyca/cryptography/issues/3804
    Change-Id: I54ba3c1fa48a2f4c633930bc7e8cc65397f86659