[openssl-dev] OpenSSL version 1.0.2e released (corrected download)

[Corinna Vinschen]

On Dec  3 21:42, Matt Caswell wrote:
> 
> 
> On 03/12/15 21:08, Corinna Vinschen wrote:
> 
> > This archive has invalid symlinks:
> > 
> > $ sha256sum openssl-1.0.2e.tar.gz 
> > e23ccafdb75cfcde782da0151731aa2185195ac745eea3846133f2e05c0e0bff  openssl-1.0.2e.tar.gz
> > $ tar tvzf openssl-1.0.2e.tar.gz  | grep '^l' | head -3
> > lrwxrwxrwx openssl/openssl     0 2015-12-03 15:44 openssl-1.0.2e/apps/md4.c -> openssl-1.0.2e/../crypto/md4/md4.c
> > lrwxrwxrwx openssl/openssl      0 2015-12-03 15:44 openssl-1.0.2e/test/bftest.c -> openssl-1.0.2e/../crypto/bf/bftest.c
> > lrwxrwxrwx openssl/openssl      0 2015-12-03 15:44 openssl-1.0.2e/test/bntest.c -> openssl-1.0.2e/../crypto/bn/bntest.c
> > 
> > Compare with openssl-1.0.2d:
> > 
> > $ tar tvzf openssl-1.0.2d.tar.gz openssl-1.0.2d | grep '^l' | head -3
> > lrwxrwxrwx openssl/openssl     0 2015-07-09 14:03 openssl-1.0.2d/apps/md4.c -> ../crypto/md4/md4.c
> > lrwxrwxrwx openssl/openssl      0 2015-07-09 14:03 openssl-1.0.2d/include/openssl/aes.h -> ../../crypto/aes/aes.h
> > lrwxrwxrwx openssl/openssl      0 2015-07-09 14:03 openssl-1.0.2d/include/openssl/asn1.h -> ../../crypto/asn1/asn1.h
> 
> The symlinks get recreated at Configure time so this should not cause
> any issues. It will get cleaned up properly in the next release.

It's an issue for out-of-tree builds when creating the source archive
for distro packaging.  It's not for me to decide but IMHO it would be
cleaner to make sure to have a fixed archive for 1.0.2e as well.


Thanks,
Corinna

-- 
Corinna Vinschen
Cygwin Maintainer
Red Hat
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20151203/97ff5e9b/attachment.sig>