From 100c9cd537dab5c719b28006b8f21a35a4f3c021 Mon Sep 17 00:00:00 2001 From: Craig Comstock Date: Tue, 11 Aug 2026 14:37:28 -0500 Subject: [PATCH] Re-enable building openssl with camellia cipher to enable SuSE PAM-based user promises The PAM modules distributed with suse-12 and suse-15 rely on this cipher. The systemd journal showed which cipher caused the PAM module to not load when using our vendored openssl instead of the distribution one. PAM unable to dlopen(/lib64/security/pam_unix.so): /usr/lib64/libk5crypto.so.3: undefined symbol: EVP_camellia_256_cbc, version OPENSSL_3.0.0 Ticket: ENT-14406 Changelog: none --- deps-packaging/openssl/config_flags_agent.txt | 2 +- deps-packaging/openssl/config_flags_hub.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/deps-packaging/openssl/config_flags_agent.txt b/deps-packaging/openssl/config_flags_agent.txt index ad6b4c779..290b0fc5c 100644 --- a/deps-packaging/openssl/config_flags_agent.txt +++ b/deps-packaging/openssl/config_flags_agent.txt @@ -1 +1 @@ -shared no-egd no-zlib no-uplink no-async no-cmp no-comp no-ct no-dgram no-dso no-ec2m no-engine no-filenames no-gost no-psk no-rfc3779 no-srp no-srtp no-ssl-trace no-tests no-ts no-ui-console no-ssl3 no-dtls no-aria no-blake2 no-camellia no-chacha no-cmac no-dsa no-ecdh no-ecdsa no-idea no-mdc2 no-ocb no-poly1305 no-rc2 no-rc4 no-scrypt no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-whirlpool no-dtls1-method no-dtls1_2-method +shared no-egd no-zlib no-uplink no-async no-cmp no-comp no-ct no-dgram no-dso no-ec2m no-engine no-filenames no-gost no-psk no-rfc3779 no-srp no-srtp no-ssl-trace no-tests no-ts no-ui-console no-ssl3 no-dtls no-aria no-blake2 no-chacha no-cmac no-dsa no-ecdh no-ecdsa no-idea no-mdc2 no-ocb no-poly1305 no-rc2 no-rc4 no-scrypt no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-whirlpool no-dtls1-method no-dtls1_2-method diff --git a/deps-packaging/openssl/config_flags_hub.txt b/deps-packaging/openssl/config_flags_hub.txt index 74f1fe2e0..d48f1bf2c 100644 --- a/deps-packaging/openssl/config_flags_hub.txt +++ b/deps-packaging/openssl/config_flags_hub.txt @@ -1 +1 @@ -shared no-egd no-zlib no-uplink no-async no-cmp no-comp no-ct no-dgram no-dso no-ec2m no-engine no-filenames no-gost no-psk no-rfc3779 no-srp no-srtp no-ssl-trace no-tests no-ts no-ui-console no-ssl3 no-dtls no-aria no-blake2 no-camellia no-chacha no-cmac no-dsa no-ecdh no-ecdsa no-idea no-mdc2 no-ocb no-poly1305 no-rc2 no-rc4 no-scrypt no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-whirlpool no-dtls1-method no-dtls1_2-method +shared no-egd no-zlib no-uplink no-async no-cmp no-comp no-ct no-dgram no-dso no-ec2m no-engine no-filenames no-gost no-psk no-rfc3779 no-srp no-srtp no-ssl-trace no-tests no-ts no-ui-console no-ssl3 no-dtls no-aria no-blake2 no-chacha no-cmac no-dsa no-ecdh no-ecdsa no-idea no-mdc2 no-ocb no-poly1305 no-rc2 no-rc4 no-scrypt no-seed no-siphash no-siv no-sm2 no-sm3 no-sm4 no-whirlpool no-dtls1-method no-dtls1_2-method