Skip to content

Commit

Permalink
Fix PACSign fails on RHEL9 because of OpenSSL version 3.0.1 #2841
Browse files Browse the repository at this point in the history
The check for openssl version is relaxed to allow all versions of libcrypto.so.3
Ubuntu 22.04 uses 3.0.2, RHEL 9.0 and 9.1 uses 3.0.1. Several higher versions already exists.

Signed-off-by: Roger Christensen <rc@silicom.dk>
  • Loading branch information
rchriste1 committed Feb 13, 2023
1 parent 15a3028 commit 121ced9
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions python/pacsign/pacsign/hsm_managers/openssl/openssl.py
Original file line number Diff line number Diff line change
Expand Up @@ -320,7 +320,8 @@ def _find_openssl_so(self, versions):

if (c_version == vers or
m.group('version') == vers or
m.group('version')[:-1] == vers):
m.group('version')[:-1] == vers or
vers == ''):
log.info('OpenSSL version "%s" matches "%s"', c_version, vers)
return dll

Expand All @@ -331,7 +332,7 @@ def _find_openssl_so(self, versions):

def __init__(self, versions=[('libcrypto.so.1.1', '1.1.1'),
('libcrypto.so.1.1', 'OpenSSL 1.1.1k FIPS 25 Mar 2021'),
('libcrypto.so.3', 'OpenSSL 3.0.2 15 Mar 2022')]):
('libcrypto.so.3', '')]):
self.nanotime = None

if _platform == "win32" or _platform == "win64":
Expand Down

0 comments on commit 121ced9

Please sign in to comment.