[GH-ISSUE #292] Older linux distributions are unable to handle new AES stuff #91

Closed
opened 2026-05-05 03:39:19 -06:00 by gitea-mirror · 6 comments
Owner

Originally created by @mirek-fidler on GitHub (Jul 16, 2025).
Original GitHub issue: https://github.com/ultimatepp/ultimatepp/issues/292

Originally assigned to: @ismail-yilmaz on GitHub.

I had a request to compile application for Rocky Linux 8.1. U++ fails to install because SSL library is too old there.

For now, I have fixed with ugly hack:

500ccc11a4

Please, can you look into this and fix it properly? I think there must be e.g. some proper SSL version info.

The question is what to do with SecureBuffer - perhaps it could use different encryption with old SSL?

Originally created by @mirek-fidler on GitHub (Jul 16, 2025). Original GitHub issue: https://github.com/ultimatepp/ultimatepp/issues/292 Originally assigned to: @ismail-yilmaz on GitHub. I had a request to compile application for Rocky Linux 8.1. U++ fails to install because SSL library is too old there. For now, I have fixed with ugly hack: https://github.com/ultimatepp/ultimatepp/commit/500ccc11a44d1b2ff15e0e80a302bf0baef63689 Please, can you look into this and fix it properly? I think there must be e.g. some proper SSL version info. The question is what to do with SecureBuffer - perhaps it could use different encryption with old SSL?
Author
Owner

@ismail-yilmaz commented on GitHub (Jul 16, 2025):

Got it. I'll find a workaround ASAP.

The question is what to do with SecureBuffer - perhaps it could use different encryption with old SSL?

Well, SecureBuffer relies only on OPENSSL_Cleanse function (it doesn't do any encryption, only locking and cleansing), which is available since OpenSSL v1.1.x. So it should work with the older version unless Rocky Linux uses a relic (pre v1.1.x). Is it that old?

<!-- gh-comment-id:3078569309 --> @ismail-yilmaz commented on GitHub (Jul 16, 2025): Got it. I'll find a workaround ASAP. > The question is what to do with SecureBuffer - perhaps it could use different encryption with old SSL? Well, `SecureBuffer` relies only on `OPENSSL_Cleanse` function (it doesn't do any encryption, only locking and cleansing), which is available since OpenSSL `v1.1.x`. So it should work with the older version unless Rocky Linux uses a relic (pre v1.1.x). Is it that old?
Author
Owner

@mirek-fidler commented on GitHub (Jul 16, 2025):

Not sure, did not investigate. If possible, I suggest to use Rocky 8.1 as "old distro model". A lot of people are stuck with it as it is basically redhat without support.... (and it will fix us for old redhats as well).

I might have been to quick to remove SecureBuffer too...

<!-- gh-comment-id:3078599766 --> @mirek-fidler commented on GitHub (Jul 16, 2025): Not sure, did not investigate. If possible, I suggest to use Rocky 8.1 as "old distro model". A lot of people are stuck with it as it is basically redhat without support.... (and it will fix us for old redhats as well). I might have been to quick to remove SecureBuffer too...
Author
Owner

@ismail-yilmaz commented on GitHub (Jul 24, 2025):

@mirek-fidler

By the way, The oldest version of Rocky Linux I could find is 8.3. There doesn't seem to be a 8.1 in the list (or in their repo).

<!-- gh-comment-id:3114844290 --> @ismail-yilmaz commented on GitHub (Jul 24, 2025): @mirek-fidler By the way, The oldest version of Rocky Linux I could find is `8.3`. There doesn't seem to be a `8.1` in the [list](https://en.wikipedia.org/wiki/Rocky_Linux?oldformat=true#Releases) (or in their repo).
Author
Owner

@mirek-fidler commented on GitHub (Jul 24, 2025):

I got it here

https://rockylinux.org/cs-CZ/download

[image: obrazek.png]

On Thu, Jul 24, 2025 at 10:34 PM İsmail Yılmaz @.***>
wrote:

ismail-yilmaz left a comment (ultimatepp/ultimatepp#292)
https://github.com/ultimatepp/ultimatepp/issues/292#issuecomment-3114844290

@mirek-fidler https://github.com/mirek-fidler

By the way, The oldest version of Rocky Linux I could find is 8.3. There
doesn't seem to be a 8.1 in the list
https://en.wikipedia.org/wiki/Rocky_Linux?oldformat=true#Releases (or
in their repo).


Reply to this email directly, view it on GitHub
https://github.com/ultimatepp/ultimatepp/issues/292#issuecomment-3114844290,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AARH23YOAMVACCC7YL3L6IL3KE7OJAVCNFSM6AAAAACBU2WAXCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTCMJUHA2DIMRZGA
.
You are receiving this because you were mentioned.Message ID:
@.***>

<!-- gh-comment-id:3115044673 --> @mirek-fidler commented on GitHub (Jul 24, 2025): I got it here https://rockylinux.org/cs-CZ/download [image: obrazek.png] On Thu, Jul 24, 2025 at 10:34 PM İsmail Yılmaz ***@***.***> wrote: > *ismail-yilmaz* left a comment (ultimatepp/ultimatepp#292) > <https://github.com/ultimatepp/ultimatepp/issues/292#issuecomment-3114844290> > > @mirek-fidler <https://github.com/mirek-fidler> > > By the way, The oldest version of Rocky Linux I could find is 8.3. There > doesn't seem to be a 8.1 in the list > <https://en.wikipedia.org/wiki/Rocky_Linux?oldformat=true#Releases> (or > in their repo). > > — > Reply to this email directly, view it on GitHub > <https://github.com/ultimatepp/ultimatepp/issues/292#issuecomment-3114844290>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AARH23YOAMVACCC7YL3L6IL3KE7OJAVCNFSM6AAAAACBU2WAXCVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTCMJUHA2DIMRZGA> > . > You are receiving this because you were mentioned.Message ID: > ***@***.***> >
Author
Owner

@killerdevildog commented on GitHub (Jul 28, 2025):

Please look at PR #294

<!-- gh-comment-id:3124845834 --> @killerdevildog commented on GitHub (Jul 28, 2025): Please look at PR #294
Author
Owner

@ismail-yilmaz commented on GitHub (Jul 28, 2025):

As for PR #294

Compatibility fix is done in the right way. Thanks @killerdevildog
Tested on Rocky Linux with OpenSSL 1.1.x. I was just preparing the same.
However, I don't think the tests are OK. They rely completely on standard library (as is).

P.s: Disregard my comment on tests, I've later seen the note:

the test files can be deleted, befoer merge just there for you to test.

<!-- gh-comment-id:3127387014 --> @ismail-yilmaz commented on GitHub (Jul 28, 2025): As for PR #294 Compatibility fix is done in the right way. Thanks @killerdevildog Tested on Rocky Linux with OpenSSL 1.1.x. I was just preparing the same. However, I don't think the tests are OK. They rely completely on standard library (as is). P.s: Disregard my comment on tests, I've later seen the note: > the test files can be deleted, befoer merge just there for you to test.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/ultimatepp#91
No description provided.