search

eilandert / deb.myguard.nl

issue tracker for deb.myguard.nl packages
https://deb.myguard.nl
1 stars 0 forks source link

OpenSSL3.x - no QUIC support #2

Open Zajsoft opened 3 months ago

Zajsoft commented 3 months ago

Hello, just now:

Get:1 http://deb.myguard.nl noble/main amd64 libssl3 amd64 3.0.14-10myguard1~noble [2235 kB]
Get:2 http://deb.myguard.nl noble/main amd64 openssl amd64 3.0.14-10myguard1~noble [1224 kB]

/usr/sbin/nginx: undefined symbol: SSL_set_quic_method, version OPENSSL_3.0.0

:_(

Hotfix - manual install(downgrade) https://deb.myguard.nl/pool/main/o/openssl/openssl_3.0.13-10myguard2~jammy_amd64.deb https://deb.myguard.nl/pool/main/o/openssl/libssl3_3.0.13-10myguard2~jammy_amd64.deb

garfieldairlines commented 3 months ago

Hello, I had doubts about this one and thought it was a layer 8 issue but I can also confirm being affected by this problem.

eilandert commented 3 months ago

Hi thank you, seems the upstream has a branch for 3.0.14 without quic, I'm going to repair it now.

eilandert commented 3 months ago

Reverted back to 3.0.13+quic on the apt repo

Zajsoft commented 3 months ago

Hi, nope, thanks to you for nice useful repo :-) And fast repair :-)

BTW packages are not tested before uploading to the repository, or what led to this situation?

eilandert commented 3 months ago

Hi, nope, thanks to you for nice useful repo :-) And fast repair :-)

BTW packages are not tested before uploading to the repository, or what led to this situation?

Manual error, the upstream ( https://github.com/quictls/openssl/ ) has a new tag 3.0.14, which my buildsystem had already rejected. Due to errors in the past on that upstream I assumed they made an error in the release chain and I forced it anyway as I usually have to do (last time they released "Opernssl" for example, the release for that there was no release), which I shouldn't have done.

My apologies, assumption is the mother of all f*ckups. I can only hope Quic comes to regular OpenSSL soon.

garfieldairlines commented 3 months ago

Hey it's all good, you made me discover (and adopt) Angie !

Quick question the docker container also has zstd and brotli as integrated modules ? ( https://hub.docker.com/r/eilandert/angie )

eilandert commented 3 months ago

Hey it's all good, you made me discover (and adopt) Angie !

Quick question the docker container also has zstd and brotli as integrated modules ? ( https://hub.docker.com/r/eilandert/angie )

Hi, yes. Everything on https://deb.myguard.nl/nginx-modules/ applies for Angie as well, except the modules have another name (angie-module-http-fancyindex instead of libnginx-mod-http-fancyindex)

eilandert commented 3 months ago

Well, I couldn't resist and fixed a 3.0.14+quic anyway, sigh