Percona Server is still built with yaSSL
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
| Percona Server moved to https://jira.percona.com/projects/PS |
Fix Released
|
High
|
Laurynas Biveinis | |
| 5.1 |
Fix Released
|
High
|
Unassigned | |
| 5.5 |
Fix Released
|
High
|
Unassigned | |
| 5.6 |
Fix Released
|
High
|
Laurynas Biveinis | |
| Percona XtraDB Cluster moved to https://jira.percona.com/projects/PXC |
Fix Released
|
Undecided
|
Raghavendra D Prabhu |
Bug Description
In lp:1028240, it looks like few conflicting yassl symbols were removed.
But https:/
However,
nm -n /usr/lib/
reveals plenty of internal (with local visibility) yassl symbols suggesting an embedded yassl.
.........
........
00000000009a2420 t yaSSL_get_
00000000009a2430 t yaSSLeay_version
00000000009a2480 t yaSSL_load_
00000000009a2490 t yaSSL_set_
00000000009a24a0 t yaSSL_get_
00000000009a24b0 t yaSSL_CTX_
00000000009a24c0 t yaSSL_CTX_
00000000009a24d0 t yaSSL_CTX_
00000000009a24e0 t yaSSL_CTX_
00000000009a24f0 t yaSSL_CTX_
00000000009a2500 t yaSSL_CTX_
00000000009a2510 t yaSSL_CTX_
00000000009a2530 t yaSSL_library_init
00000000009a25b0 t yaSSL_get_
00000000009a25c0 t yaSSL_get_
00000000009a25d0 t yaSSL_SESSION_free
00000000009a2630 t yaSSLv2_
00000000009a2730 t yaSSLeay_
00000000009a2820 t yaSSL_alert_
00000000009a2830 t yaSSL_alert_
00000000009a2840 t yaSSL_state_
00000000009a2850 t yaSSL_CTX_
00000000009a2860 t yaSSL_CTX_
00000000009a2870 t yaSSL_CTX_
00000000009a2880 t yaSSL_CTX_
00000000009a2890 t yaSSL_set_rfd
00000000009a28a0 t yaSSL_set_wfd
00000000009a28b0 t yaSSL_want_read
.......
...................
nm -n /usr/lib/
also reveals something similar.
=======
=======
The openssl compatibility layer file defines
#ifdef YASSL_PREFIX
#include "prefix_ssl.h"
#endif
which equals to being built with embedded yaSSL.
YASSL_PREFIX is true if WITH_SSL=bundled is passed or --with-ssl is passed in configure options.
Passing WITH_SSL=system or --with-ssl= builds with openssl of the system.
This is how it looks if mysql is built with system openssl:
nm -D `which mysqld` | grep -i ssl
U OPENSSL_
U SSL_CIPHER_get_name
U SSL_CTX_
U SSL_CTX_ctrl
U SSL_CTX_free
U SSL_CTX_
U SSL_CTX_
U SSL_CTX_
U SSL_CTX_new
U SSL_CTX_
U SSL_CTX_
U SSL_CTX_
U SSL_CTX_set_verify
U SSL_CTX_
U SSL_CTX_
U SSL_SESSION_
U SSL_accept
U SSL_clear
U SSL_connect
U SSL_ctrl
U SSL_free
U SSL_get_cipher_list
with ldd revealing:
ldd =mysqld
libaio.so.1 => /usr/lib64/
libz.so.1 => /usr/lib64/
libdl.so.2 => /usr/lib64/
libm.so.6 => /usr/lib64/
libc.so.6 => /usr/lib64/
with
/usr/lib64/
Related branches
- Laurynas Biveinis (community): Approve on 2013-04-09
-
Diff: 51 lines (+5/-0)3 files modifiedbuild/build-binary.sh (+1/-0)
build/debian/rules (+2/-0)
build/percona-server.spec (+2/-0)
- Laurynas Biveinis (community): Approve on 2013-04-03
-
Diff: 69 lines (+20/-5)4 files modifiedPercona-Server/config/ac-macros/ssl.m4 (+17/-2)
build/build-binary.sh (+1/-1)
build/debian/rules (+1/-1)
build/percona-server.spec (+1/-1)
- Raghavendra D Prabhu: Pending requested 2013-04-05
-
Diff: 77 lines (+7/-2)5 files modifiedbuild/build-binary.sh (+1/-0)
build/build-rpm.sh (+1/-1)
build/build-shared-compat-rpm.sh (+1/-1)
build/debian/rules (+2/-0)
build/percona-xtradb-cluster.spec (+2/-0)
- Stewart Smith (community): Approve on 2013-05-31
-
Diff: 28652 lines (+8737/-18610)172 files modifiedCOPYING.innodb-deadlock-count-patch (+0/-30)
COPYING.show_temp_51 (+13/-0)
Makefile (+2/-2)
Percona-Server/client/mysqldump.c (+121/-21)
Percona-Server/include/errmsg.h (+1/-0)
Percona-Server/libmysql/errmsg.c (+1/-0)
Percona-Server/mysql-test/include/have_pool_of_threads.inc (+0/-4)
Percona-Server/mysql-test/include/log_grep.inc (+0/-41)
Percona-Server/mysql-test/include/percona_query_cache_with_comments.inc (+95/-0)
Percona-Server/mysql-test/include/percona_query_cache_with_comments_begin.inc (+0/-12)
Percona-Server/mysql-test/include/percona_query_cache_with_comments_clear.inc (+5/-0)
Percona-Server/mysql-test/include/percona_query_cache_with_comments_eval.inc (+7/-0)
Percona-Server/mysql-test/include/percona_show_slave_status_nolock.inc (+0/-56)
Percona-Server/mysql-test/r/have_pool_of_threads.require (+2/-0)
Percona-Server/mysql-test/r/percona_bug1170103.result (+19/-0)
Percona-Server/mysql-test/r/percona_bug933969.result (+0/-16)
Percona-Server/mysql-test/r/percona_innodb_deadlock_count.result (+28/-0)
Percona-Server/mysql-test/r/percona_log_slow_admin_statements-config.result (+0/-6)
Percona-Server/mysql-test/r/percona_log_slow_admin_statements-config_foo.result (+7/-0)
Percona-Server/mysql-test/r/percona_log_slow_admin_statements-config_true.result (+0/-6)
Percona-Server/mysql-test/r/percona_log_slow_filter-cl.result (+0/-6)
Percona-Server/mysql-test/r/percona_min_examined_row_limit.result (+0/-35)
Percona-Server/mysql-test/r/percona_mysqldump_innodb_optimize_keys.result (+47/-0)
Percona-Server/mysql-test/r/percona_query_cache_with_comments_crash.result (+21/-0)
Percona-Server/mysql-test/r/percona_query_cache_with_comments_prepared_statements.result (+0/-396)
Percona-Server/mysql-test/r/percona_status_wait_query_cache_mutex.result (+20/-0)
Percona-Server/mysql-test/r/pool_of_threads.result (+2169/-0)
Percona-Server/mysql-test/r/pool_of_threads_high_prio_tickets.result (+2169/-0)
Percona-Server/mysql-test/suite/binlog/r/percona_bug1162085.result (+6/-0)
Percona-Server/mysql-test/suite/binlog/t/percona_bug1162085.test (+30/-0)
Percona-Server/mysql-test/suite/innodb/r/percona_changed_page_bmp.result (+8/-3)
Percona-Server/mysql-test/suite/innodb/t/percona_changed_page_bmp-master.opt (+1/-1)
Percona-Server/mysql-test/suite/innodb/t/percona_changed_page_bmp.test (+16/-3)
Percona-Server/mysql-test/suite/rpl/r/percona_bug860910.result (+0/-23)
Percona-Server/mysql-test/suite/rpl/t/percona_bug860910.test (+0/-38)
Percona-Server/mysql-test/suite/sys_vars/r/extra_max_connections_basic.result (+43/-0)
Percona-Server/mysql-test/suite/sys_vars/r/extra_port_basic.result (+21/-0)
Percona-Server/mysql-test/suite/sys_vars/r/query_exec_id_basic.result (+2/-0)
Percona-Server/mysql-test/suite/sys_vars/r/thread_pool_high_prio_tickets_basic.result (+47/-0)
Percona-Server/mysql-test/suite/sys_vars/r/thread_pool_idle_timeout_basic.result (+47/-0)
Percona-Server/mysql-test/suite/sys_vars/r/thread_pool_max_threads_basic.result (+47/-0)
Percona-Server/mysql-test/suite/sys_vars/r/thread_pool_min_threads_basic.result (+49/-0)
Percona-Server/mysql-test/suite/sys_vars/r/thread_pool_oversubscribe_basic.result (+47/-0)
Percona-Server/mysql-test/suite/sys_vars/r/thread_pool_stall_limit_basic.result (+47/-0)
Percona-Server/mysql-test/suite/sys_vars/t/extra_max_connections_basic.test (+0/-42)
Percona-Server/mysql-test/suite/sys_vars/t/query_exec_id_basic.test (+0/-4)
Percona-Server/mysql-test/suite/sys_vars/t/thread_pool_high_prio_tickets_basic.test (+43/-0)
Percona-Server/mysql-test/suite/sys_vars/t/thread_pool_idle_timeout_basic.test (+0/-43)
Percona-Server/mysql-test/suite/sys_vars/t/thread_pool_min_threads_basic.test (+0/-43)
Percona-Server/mysql-test/suite/sys_vars/t/thread_pool_oversubscribe_basic.test (+0/-43)
Percona-Server/mysql-test/suite/sys_vars/t/thread_pool_size_basic.test (+47/-0)
Percona-Server/mysql-test/suite/sys_vars/t/thread_pool_stall_limit_basic.test (+0/-43)
Percona-Server/mysql-test/t/percona_bug1170103-master.opt (+1/-0)
Percona-Server/mysql-test/t/percona_bug1170103.test (+23/-0)
Percona-Server/mysql-test/t/percona_bug933969.test (+0/-42)
Percona-Server/mysql-test/t/percona_log_slow_admin_statements-config_false.test (+2/-0)
Percona-Server/mysql-test/t/percona_log_slow_admin_statements-config_foo.test (+3/-0)
Percona-Server/mysql-test/t/percona_log_slow_admin_statements-config_true.cnf (+4/-0)
Percona-Server/mysql-test/t/percona_log_slow_slave_statements-cl-master.opt (+0/-1)
Percona-Server/mysql-test/t/percona_log_slow_sp_statements-cl-master.opt (+0/-1)
Percona-Server/mysql-test/t/percona_log_slow_sp_statements-cl.test (+2/-0)
Percona-Server/mysql-test/t/percona_log_slow_verbosity-cl-master.opt (+0/-1)
Percona-Server/mysql-test/t/percona_log_slow_verbosity-cl.test (+0/-2)
Percona-Server/mysql-test/t/percona_mysqldump_innodb_optimize_keys.test (+27/-0)
Percona-Server/mysql-test/t/percona_query_cache_with_comments_prepared_statements.test (+0/-208)
Percona-Server/mysql-test/t/percona_status_wait_query_cache_mutex.test (+0/-35)
Percona-Server/mysql-test/t/percona_xtradb_bug317074.test (+47/-0)
Percona-Server/mysql-test/t/pool_of_threads.cnf (+15/-0)
Percona-Server/mysql-test/t/pool_of_threads_high_prio_tickets.cnf (+16/-0)
Percona-Server/mysql-test/t/pool_of_threads_high_prio_tickets.test (+19/-0)
Percona-Server/mysys/mf_cache.c (+5/-3)
Percona-Server/sql/query_strip_comments.h (+37/-0)
Percona-Server/sql/sys_vars.cc (+7/-0)
Percona-Server/sql/threadpool.h (+72/-0)
Percona-Server/sql/threadpool_common.cc (+367/-0)
Percona-Server/sql/threadpool_unix.cc (+1699/-0)
Percona-Server/sql/threadpool_win.cc (+763/-0)
Percona-Server/storage/innobase/handler/ha_innodb.cc (+4/-0)
Percona-Server/storage/innobase/include/srv0srv.h (+5/-0)
Percona-Server/storage/innobase/log/log0log.cc (+7/-1)
Percona-Server/storage/innobase/read/read0read.cc (+9/-0)
Percona-Server/storage/innobase/row/row0sel.cc (+3/-3)
Percona-Server/storage/innobase/srv/srv0srv.cc (+32/-0)
Percona-Server/storage/innobase/trx/trx0sys.cc (+2/-0)
Percona-Server/storage/innobase/trx/trx0trx.cc (+1/-0)
UDF/configure.ac (+1/-0)
build/build-binary.sh (+1/-0)
build/debian/additions/debian-start (+0/-32)
build/debian/additions/debian-start.inc.sh (+0/-72)
build/debian/compat (+0/-1)
build/debian/rules (+3/-1)
build/percona-server.spec (+15/-10)
build/percona-shared-compat.spec (+1/-1)
build/rpm/mysql-dubious-exports.patch (+0/-127)
doc/source/conf.py (+1/-1)
doc/source/development.rst (+0/-266)
doc/source/diagnostics/user_stats.rst (+0/-242)
doc/source/flexibility/buff_read_ahead_area.rst (+36/-0)
doc/source/management/innodb_expanded_fast_index_creation.rst (+0/-82)
doc/source/management/innodb_fake_changes.rst (+70/-0)
doc/source/management/innodb_kill_idle_trx.rst (+0/-2)
doc/source/percona_xtradb.rst (+13/-0)
doc/source/performance/query_cache_enhance.rst (+123/-0)
doc/source/performance/threadpool.rst (+33/-0)
doc/source/reliability/error_pad.rst (+0/-55)
doc/source/reliability/innodb_corrupt_table_action.rst (+0/-35)
doc/source/upstream-bug-fixes.rst (+40/-16)
python-for-subunit2junitxml/BytesIO.py (+0/-136)
python-for-subunit2junitxml/iso8601/LICENSE (+0/-20)
python-for-subunit2junitxml/iso8601/README (+0/-26)
python-for-subunit2junitxml/iso8601/README.subunit (+0/-5)
python-for-subunit2junitxml/iso8601/setup.py (+0/-58)
python-for-subunit2junitxml/iso8601/test_iso8601.py (+0/-111)
python-for-subunit2junitxml/junitxml/__init__.py (+0/-221)
python-for-subunit2junitxml/junitxml/tests/__init__.py (+0/-16)
python-for-subunit2junitxml/junitxml/tests/test_junitxml.py (+0/-327)
python-for-subunit2junitxml/subunit/__init__.py (+0/-1250)
python-for-subunit2junitxml/subunit/chunked.py (+0/-185)
python-for-subunit2junitxml/subunit/details.py (+0/-119)
python-for-subunit2junitxml/subunit/iso8601.py (+0/-133)
python-for-subunit2junitxml/subunit/progress_model.py (+0/-106)
python-for-subunit2junitxml/subunit/run.py (+0/-73)
python-for-subunit2junitxml/subunit/test_results.py (+0/-492)
python-for-subunit2junitxml/subunit/tests/TestUtil.py (+0/-80)
python-for-subunit2junitxml/subunit/tests/__init__.py (+0/-41)
python-for-subunit2junitxml/subunit/tests/sample-script.py (+0/-21)
python-for-subunit2junitxml/subunit/tests/sample-two-script.py (+0/-7)
python-for-subunit2junitxml/subunit/tests/test_chunked.py (+0/-152)
python-for-subunit2junitxml/subunit/tests/test_details.py (+0/-112)
python-for-subunit2junitxml/subunit/tests/test_progress_model.py (+0/-118)
python-for-subunit2junitxml/subunit/tests/test_subunit_filter.py (+0/-208)
python-for-subunit2junitxml/subunit/tests/test_subunit_stats.py (+0/-84)
python-for-subunit2junitxml/subunit/tests/test_subunit_tags.py (+0/-69)
python-for-subunit2junitxml/subunit/tests/test_tap2subunit.py (+0/-445)
python-for-subunit2junitxml/subunit/tests/test_test_protocol.py (+0/-1299)
python-for-subunit2junitxml/subunit/tests/test_test_results.py (+0/-300)
python-for-subunit2junitxml/testtools/__init__.py (+0/-80)
python-for-subunit2junitxml/testtools/_spinner.py (+0/-316)
python-for-subunit2junitxml/testtools/compat.py (+0/-286)
python-for-subunit2junitxml/testtools/content.py (+0/-238)
python-for-subunit2junitxml/testtools/content_type.py (+0/-33)
python-for-subunit2junitxml/testtools/deferredruntest.py (+0/-335)
python-for-subunit2junitxml/testtools/distutilscmd.py (+0/-62)
python-for-subunit2junitxml/testtools/helpers.py (+0/-64)
python-for-subunit2junitxml/testtools/matchers.py (+0/-785)
python-for-subunit2junitxml/testtools/monkey.py (+0/-97)
python-for-subunit2junitxml/testtools/run.py (+0/-332)
python-for-subunit2junitxml/testtools/runtest.py (+0/-200)
python-for-subunit2junitxml/testtools/testcase.py (+0/-724)
python-for-subunit2junitxml/testtools/testresult/__init__.py (+0/-19)
python-for-subunit2junitxml/testtools/testresult/doubles.py (+0/-111)
python-for-subunit2junitxml/testtools/testresult/real.py (+0/-621)
python-for-subunit2junitxml/testtools/tests/__init__.py (+0/-44)
python-for-subunit2junitxml/testtools/tests/helpers.py (+0/-72)
python-for-subunit2junitxml/testtools/tests/test_compat.py (+0/-257)
python-for-subunit2junitxml/testtools/tests/test_content.py (+0/-223)
python-for-subunit2junitxml/testtools/tests/test_content_type.py (+0/-46)
python-for-subunit2junitxml/testtools/tests/test_deferredruntest.py (+0/-738)
python-for-subunit2junitxml/testtools/tests/test_distutilscmd.py (+0/-90)
python-for-subunit2junitxml/testtools/tests/test_fixturesupport.py (+0/-79)
python-for-subunit2junitxml/testtools/tests/test_helpers.py (+0/-106)
python-for-subunit2junitxml/testtools/tests/test_matchers.py (+0/-695)
python-for-subunit2junitxml/testtools/tests/test_monkey.py (+0/-167)
python-for-subunit2junitxml/testtools/tests/test_run.py (+0/-77)
python-for-subunit2junitxml/testtools/tests/test_runtest.py (+0/-300)
python-for-subunit2junitxml/testtools/tests/test_spinner.py (+0/-332)
python-for-subunit2junitxml/testtools/tests/test_testresult.py (+0/-1372)
python-for-subunit2junitxml/testtools/tests/test_testsuite.py (+0/-53)
python-for-subunit2junitxml/testtools/tests/test_testtools.py (+0/-1143)
python-for-subunit2junitxml/testtools/tests/test_with_with.py (+0/-42)
python-for-subunit2junitxml/testtools/testsuite.py (+0/-87)
python-for-subunit2junitxml/testtools/utils.py (+0/-13)
- Stewart Smith (community): Approve on 2013-05-31
-
Diff: 154 lines (+32/-32)4 files modifiedbuild/build-binary.sh (+8/-8)
build/build-rpm.sh (+2/-2)
build/debian/control (+14/-14)
build/debian/rules (+8/-8)
Previous release is also affected:
[valerii.
00000000009d1510 t yaSSL_get_
00000000009d1520 t yaSSLeay_version
00000000009d1570 t yaSSL_load_
00000000009d1580 t yaSSL_set_
00000000009d1590 t yaSSL_get_
00000000009d15a0 t yaSSL_CTX_
00000000009d15b0 t yaSSL_CTX_
00000000009d15c0 t yaSSL_CTX_
00000000009d15d0 t yaSSL_CTX_
00000000009d15e0 t yaSSL_CTX_
00000000009d15f0 t yaSSL_CTX_
00000000009d1600 t yaSSL_CTX_
00000000009d1620 t yaSSL_library_init
00000000009d16a0 t yaSSL_get_
00000000009d16b0 t yaSSL_get_
00000000009d16c0 t yaSSL_SESSION_free
00000000009d1720 t yaSSLv2_
00000000009d1820 t yaSSLeay_
00000000009d1910 t yaSSL_alert_
00000000009d1920 t yaSSL_alert_
00000000009d1930 t yaSSL_state_
00000000009d1940 t yaSSL_CTX_
00000000009d1950 t yaSSL_CTX_
...
Changed in percona-server: | |
status: | New → Confirmed |
summary: |
- Percona Server is still built yaSSL + Percona Server is still built with yaSSL |
Valerii -
Based on the bug assignment, are you still working on this bug on 5.1?
tags: | added: pkg |
Confirmed also with Percona-
[openxs@centos Percona-
00000000008d8920 T yaSSL_get_
00000000008d8930 T yaSSLeay_version
00000000008d8980 T yaSSL_load_
00000000008d8990 T yaSSL_set_
00000000008d89a0 T yaSSL_get_
00000000008d89b0 T yaSSL_CTX_
00000000008d89c0 T yaSSL_CTX_
00000000008d89d0 T yaSSL_CTX_
00000000008d89e0 T yaSSL_CTX_
00000000008d89f0 T yaSSL_CTX_
00000000008d8a00 T yaSSL_CTX_
00000000008d8a10 T yaSSL_CTX_
00000000008d8a30 T yaSSL_library_init
00000000008d8ab0 T yaSSL_get_
00000000008d8ac0 T yaSSL_get_
00000000008d8ad0 T yaSSL_SESSION_free
00000000008d8b30 T yaSSLv2_
00000000008d8c30 T yaSSLeay_
00000000008d8d20 T yaSSL_alert_
00000000008d8d30 T yaSSL_alert_
00000000008d8d40 T yaSSL_state_
00000000008d8d50 T yaSSL_CTX_
00000000008d8d60 T yaSSL_CTX_
...
Changed in percona-server: | |
importance: | Undecided → High |
assignee: | nobody → Ignacio Nin (ignacio-nin) |
This is required for PXC as well.
pwd
...... /percona-
grep -r 'with yassl' .
./build-
./build-rpm.sh: rpmbuild -ba --clean --with yassl $TARGET $SIGN $QUIET \
In addition to those files, percona-
Changed in percona-xtradb-cluster: | |
status: | New → Triaged |
Changed in percona-xtradb-cluster: | |
milestone: | none → 5.5.30-23.7.4 |
Changed in percona-xtradb-cluster: | |
assignee: | nobody → Raghavendra D Prabhu (raghavendra-prabhu) |
status: | Triaged → Fix Committed |
Changed in percona-xtradb-cluster: | |
status: | Fix Committed → Fix Released |
Ignacio Nin (ignacio-nin) wrote : | #7 |
Since the 5.5 bug is fixed on revno 481, we wait for those to be merged before merging it into 5.6. Also it may be convenient to wait until the fix for lp:1165098 is merged since the fix for these will conflict in build/ otherwise.
Ignacio -
Not sure hat you mean, the 5.5 revno 481 is a completely unrelated change?
Ignacio Nin (ignacio-nin) wrote : | #9 |
Lauryinas,
Some lack of clarity from my part :) The bug in 5.5 is fixed, in lp:~ignacio-nin/percona-server/5.5-bug1104977, *on top* of revno 481, i.e. the bugfix is revno 482.
Since revno 481 (of 5.5, a completely unrelated change) hasn't been merged onto 5.6, we'll need to wait for the 5.5 tree upto at least revno 481 to me merged onto 5.6 in order to merge lp:~ignacio-nin/percona-server/5.5-bug1104977 onto 5.6.
N.
In general case the fix would need to be rebased using the GCA script, but in this instance I think it's more trouble than worth it due to the GCA revision preceding correct fileids.
Percona now uses JIRA for bug reports so this bug report is migrated to: https:/
Percona now uses JIRA for bug reports so this bug report is migrated to: https:/
This was tested with latest PS - 5.5.29-29.3