Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1543336
Summary: | please provide missing Fedora 27 Perl modules | ||
---|---|---|---|
Product: | [Fedora] Fedora EPEL | Reporter: | cornel panceac <cpanceac> |
Component: | perl-Net-SSH | Assignee: | Jitka Plesnikova <jplesnik> |
Status: | NEW --- | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | epel7 | CC: | denis, jplesnik, paul, perl-devel, ppisar, steve |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | Type: | Bug | |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
cornel panceac
2018-02-08 09:43:26 UTC
On the other hand, maybe i/we should try to rebuild F19 modules because these share the perl version (5.16) with C7. hmmm, it seems that File::Basename is actually builtin. Still checking :( Additional modules missing for me : perl-Crypt-Blowfish perl-Crypt-RSA perl-Math-Pari perl-Test-YAML-Meta perl-Text-SpellChecker Some of these dependencies are coming from perl-Net-SSH-Perl. Currently we have an old version of this in Fedora because the current version replaces a lot of old, unmaintained (upstream) crypto modules with perl-CryptX, which is actively maintained by its upstream developer. However, nobody has yet packaged that for Fedora. It has been looked at in the past but nothing happened with it because it included a bundled libtomcrypt, which may not be as big an issue these days, or it might even be possible to unbundle it. If someone could package that, we could update perl-Net-SSH-Perl and some of these other dependencies would go away. Blowfish rebuild worked (from f19). New required packages for me: perl-Class-Loader perl-Convert-ASCII-Armour perl-Crypt-Primes perl-Crypt-Random perl-Tie-EncryptedHash (In reply to Paul Howarth from comment #4) > Some of these dependencies are coming from perl-Net-SSH-Perl. Currently we > have an old version of this in Fedora because the current version replaces a > lot of old, unmaintained (upstream) crypto modules with perl-CryptX, which > is actively maintained by its upstream developer. However, nobody has yet > packaged that for Fedora. It has been looked at in the past but nothing > happened with it because it included a bundled libtomcrypt, which may not be > as big an issue these days, or it might even be possible to unbundle it. > > If someone could package that, we could update perl-Net-SSH-Perl and some of > these other dependencies would go away. Thank you, but is not clear for me what i would need to do here in order to package the newer version. If there is some tutorial somewhere or at least somebody can provide the details i can as well try it. perl-Term-ReadPassword rebuild worked also. so indeed we're left with perl-Net-SSH-Perl and its dependencies. Looking at CryptX's Makefile.PL (https://metacpan.org/source/MIK/CryptX-0.057/Makefile.PL), it appears that it's now possible to use an unbundled libtomcrypt, by specifying $CRYPTX_CFLAGS and/or $CRYPTX_LDFLAGS in the environment. Jitka, Petr, any comments? Could we get together and produce a perl-CryptX package now? I was able to hunt the dependencies and rebuild those two modules but it still would be nice to have this already available in upstream. Thank you. CryptX-0.057 not only bundles libtomcrypt, it also patches it to add implementations for IDEA, SERPENT, SALSA20, SOSEMANUK, and RABBIT stream ciphers. And then it require their implementation in CryptX.xs unconditionally. Libtomcrypt recently had a new release: https://github.com/libtom/libtomcrypt/releases Though I don't know whether it includes all the requirements now, but worth to check, anyway (and update it in Fedora if needed). Even If I disable/comment all these additional bindings and typemaps, I still get mismatch in <tomcrypt_pk.h> on struct ltc_ecc_set_type. The bundled structure has additional members (A, cofactor, oid) and the binding code expects them. (In reply to Denis Fateyev from comment #11) > Libtomcrypt recently had a new release: > https://github.com/libtom/libtomcrypt/releases > Though I don't know whether it includes all the requirements now, but worth > to check, anyway (and update it in Fedora if needed). Fedora already delivers 1.18.1. The cofactor is being added in <https://github.com/libtom/libtomcrypt/commit/79f553c9b76cea00b635044ff3d5c5a1112b12ce>. Not yet in the master branch. I requested new branch and built these packages for EPEL 7. I am maintainer of them. perl-Convert-ASCII-Armour-1.4-32.el7 perl-Net-SSH-0.09-26.el7 perl-Term-ReadPassword-0.11-27.el7 The other packages are owned by different users and I don't want to maintain EPEL 7 branches for them. FAS: ixs perl-Crypt-Blowfish FAS: berrange perl-Test-YAML-Meta FAS: pghmcfc perl-Net-SSH-Perl perl-Crypt-RSA perl-Math-Pari perl-Text-SpellChecker perl-Class-Loader perl-Crypt-Primes perl-Crypt-Random perl-Tie-EncryptedHash (In reply to Jitka Plesnikova from comment #15) > The other packages are owned by different users and I don't want to maintain > EPEL 7 branches for them. > > FAS: ixs > perl-Crypt-Blowfish > > FAS: berrange > perl-Test-YAML-Meta > > FAS: pghmcfc > perl-Net-SSH-Perl > perl-Crypt-RSA > perl-Math-Pari > perl-Text-SpellChecker > perl-Class-Loader > perl-Crypt-Primes > perl-Crypt-Random > perl-Tie-EncryptedHash None of these (apart from perl-Net-SSH-Perl) are needed if we get perl-CryptX and the new version of Net-SSH-Perl that uses it. Given that CryptX is bundling a patched version of libtomcrypt, I think it's viable to create a perl-CryptX package that includes the bundled libtomcrypt (with Provides: bundled(libtomcrypt) = 1.18) until such time as the differences are merged upstream. Anyone disagree? I don't think this ever happen. CryptX author always develops on his libtomcrypt fork. I'd rather try packaging an older CryptX version that could work with upstream libtomcrypt. I don't think it's wise to bundle, especially a cryptographic library. It looks like 0.053 can be packaged if I disable ECC support. I will try that and put the package on review. Bug #1545816 is perl-CryptX review. The current version of Net-SSH-Perl requires IO::Socket::Socks. Bug #1546648 is perl-IO-Socket-Socks review. What is the current status of this bug? All current Fedora releases have a CryptX-based version of Net-SSH-Perl now, though most of the ECC-related functionality is missing as it was stripped out of perl-CryptX. Would that be OK for you if it was in EPEL-7? I don't know if Petr is prepared to build this hobbled perl-CryptX for EPEL. In F30: No match for argument: perl-File-Basename I know i've said it's builtin but i don't remember why :) Everything else i've mentioned above can be installed. $ rpm -q --whatprovides 'perl(File::Basename)' perl-interpreter-5.28.2-440.fc30.x86_64 |