Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

[amayajindal786]

[-- Attachment #1: Type: text/plain, Size: 505 bytes --]

I am using currently krogoth yocto for my current Arm based board. I am having currently openssl 1.0.2h and related recipes from current version but when I want to add TLs 1.3 that is openssl 1.1.1a/b/pre etc from available yocto source or from thud20. 0 yocto I am getting lot of issues. First of all I had to change rpm 4.14. 2 from current 5.4.16. After some time I got error in gobject-introspection recipe 1.46 version that sha1 sha256 hash not found when try to search in python 2.7.2 Please guide

[-- Attachment #2: Type: text/html, Size: 505 bytes --]

Re: [yocto] Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

[Alexander Kanavin]

[-- Attachment #1: Type: text/plain, Size: 1006 bytes --]

Backporting core pieces across many yocto releases is basically impossible.
You more or less end up having to move and integrate half of the stack,
which is a herculean task.

The correct way to approach this is to have a strategy and plan for
migrating to newer yocto releases. Investigate what you need to to do to
move to thud, or newer, because thud is not a supported release anymore.

Alex

On Tue, 18 Feb 2020 at 08:25, <amayajindal786@gmail.com> wrote:

> I am using currently krogoth yocto for my current Arm based board. I am
> having currently openssl 1.0.2h and related recipes from current version
> but when I want to add TLs 1.3 that is openssl 1.1.1a/b/pre etc from
> available yocto source or from thud20. 0 yocto I am getting lot of issues.
> First of all I had to change rpm 4.14. 2 from current 5.4.16. After some
> time I got error in gobject-introspection recipe 1.46 version that sha1
> sha256 hash not found when try to search in python 2.7.2 Please guide
> 
>

[-- Attachment #2: Type: text/html, Size: 1324 bytes --]

Re: [yocto] Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

[amayajindal786]

[-- Attachment #1: Type: text/html, Size: 3274 bytes --]

Re: [yocto] Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

[Mikko Rapeli]

Hi,

On Tue, Feb 18, 2020 at 01:20:25PM +0530, amaya jindal wrote:
>    Thanks for your prompt reply. But is not there any way similar to add
>    support for TLS1.3 instead of moving to new yocto releases

openssl is tricky to update and requires backporting fixes for many, many recipes
to get builds passing etc. Depending on project size, it may be possible
to update only those components which you use, e.g. backport commits from
poky master or release branches like warrior. The number of backported changes
will be large. I've ported openssl 1.1.1d patches to yocto 2.5 sumo but it wasn't
pretty. A strategy with regular yocto updates is much better and forces you
to think of your dependencies and patches much harder.

Hope this helps,

-Mikko

Re: [yocto] Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

[amaya jindal]

[-- Attachment #1: Type: text/html, Size: 1462 bytes --]

Re: [yocto] Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

[amaya jindal]

[-- Attachment #1: Type: text/html, Size: 2236 bytes --]

Re: [yocto] Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

[amaya jindal]

[-- Attachment #1: Type: text/html, Size: 2949 bytes --]

Re: [yocto] Issue while adding the support for TLS1.3 in existing krogoth yocto #yocto #yocto #yocto #yocto #apt #raspberrypi #yocto

[amaya jindal]

[-- Attachment #1: Type: text/html, Size: 3715 bytes --]