From patchwork Fri Feb 13 23:01:27 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Colin Pinnell McAllister X-Patchwork-Id: 81100 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 997F7EF99E5 for ; Fri, 13 Feb 2026 23:01:57 +0000 (UTC) Received: from mail-oa1-f44.google.com (mail-oa1-f44.google.com [209.85.160.44]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1689.1771023716370866145 for ; Fri, 13 Feb 2026 15:01:56 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=Nkq9vlzA; spf=pass (domain: gmail.com, ip: 209.85.160.44, mailfrom: colinmca242@gmail.com) Received: by mail-oa1-f44.google.com with SMTP id 586e51a60fabf-40ea36b56b7so1108168fac.3 for ; Fri, 13 Feb 2026 15:01:56 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771023715; x=1771628515; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=uDOtaQklFCKiyXICumIzWCXsGRv6KX90srPPx3wn0gw=; b=Nkq9vlzAhLDqX8AiB5S1fIKlWt1FsgaM5AGEzok1tOAnBz5GyWiQxj/XbjgFZLMoT9 hqclMceCoaNKND+x0P+qtzLiRjnIeEhepMe8bmvZhZ9qAGAZFT+VvnkvlXNYGAWqpuFS WJlrAxYEb3fKdHFkeKDe6vOckzdpEE79AGCG0vXNGUMWkdjZpWaio1LoS9tp85dlRFR3 Pb0kvi8s6Q/iESplWVFWEPxIszwpWlLLIpS9XFqR++6BUKGC6pYv8RU8C1KwIWbHZzEL XTSfFo9BQ6trDfFl/vPH7YVCfYEAeDrMi6/k2FgAn+v2BMNJj5UDRGPtJ1oqkW7OBsPq 5D7Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771023715; x=1771628515; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=uDOtaQklFCKiyXICumIzWCXsGRv6KX90srPPx3wn0gw=; b=R7L3Fo6/epnxzFwWqBkH8e6NnnUu7/Mb5+EIqaq9l1zTtOqaaxWt+fHUA9cadUSbnw zoFTGvFOG3GtLXu/cAg2Op6T9cIWhM/pcsI4OUVmLAD+nbZc2Jdv2cjoGRzHh2gNzLL/ K75qPm8ImyEZMnbnML20WaZvYDyGqead3gDgjzPKTlVU1N9TmEsaCEwa/uszZtHZhBjh y6MUeQBK9aQg+a3ZsMIjA+EKZ+bN/jS6o7u41B6ehZECEV9o/CYwLCN2GysFnAYtDqmi b06ZEb0z7xuSui8T+GgS2FPHmoUGfUTeSSdePDd7BLR3AcZkPVTsGtMgjubWRtW/DICL OexA== X-Gm-Message-State: AOJu0YyPPpkeguw611sNKjDQ9/9FC/UkDy8URP605qhFDXGeSV+oblyq vJuGiDVG43sgTxi7Fnc+u2l9ZO9xb8KChqDaIrbBJSdWH/vkYKooBgTVJ5BhcA== X-Gm-Gg: AZuq6aLZtP54fbvdJBVXLDdm0wzI6FYADVZaktXOrElVD7d818dYGtgRcBD8l0TBGAX YLhxyo92sQGPMKsGhNqalVK1M7u+OVkMAz+v4wU9wezUI7GjlP1DvMwNQJun3Lqh/oSh5NJcZyJ DTk/Q7xu4fjuo8YZ78h2/S5yvlyWDCC7uTf7G/eAbIK6F3RNnD0vJkIsFte20FddbWh1bu5oIGH QzPj9PHyXG+K+mfgGfmwzMl8XCY4AG60c9ty8gVsOxW2P4q2NAI6ECfR0SaDacxwd4tHMyPvOcU m1e8+nA6YsB7bYN/UxxIernyFdL/ospD4SXev3eVvPycuhHgC7oXE5ZSkpq6VmbqzqB7YfRedyd N6X72hItZThuDFIprL87tGuJIS6FmxjDupYSfSUs9ebfPH+7t08dICHq/BmSPZEqvSu+96fgOL9 2FZYgiSZKB5sUN8jPJnCU= X-Received: by 2002:a05:6870:d415:b0:3fd:9f68:b8c4 with SMTP id 586e51a60fabf-40ef3e70599mr1904197fac.28.1771023714941; Fri, 13 Feb 2026 15:01:54 -0800 (PST) Received: from fedora ([136.37.200.217]) by smtp.gmail.com with ESMTPSA id 586e51a60fabf-40eaf101db0sm8092157fac.12.2026.02.13.15.01.54 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Feb 2026 15:01:54 -0800 (PST) From: Colin Pinnell McAllister To: openembedded-core@lists.openembedded.org Cc: Colin Pinnell McAllister Subject: [PATCH v2 1/4] python3: Backport TLS test fix Date: Fri, 13 Feb 2026 17:01:27 -0600 Message-ID: <20260213230130.757732-2-colinmca242@gmail.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260213230130.757732-1-colinmca242@gmail.com> References: <20260211184917.1045939-1-colinmca242@gmail.com> <20260213230130.757732-1-colinmca242@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 13 Feb 2026 23:01:57 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231141 Backports fix for Python3 that allows TLS 1.2 to be the minimum version. Signed-off-by: Colin Pinnell McAllister --- v2 changes: * Add this patch to fix python3 ptest build failures ...Allow-TLS-v1.2-to-be-minimum-version.patch | 39 +++++++++++++++++++ .../recipes-devtools/python/python3_3.14.2.bb | 1 + 2 files changed, 40 insertions(+) create mode 100644 meta/recipes-devtools/python/python3/0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch diff --git a/meta/recipes-devtools/python/python3/0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch b/meta/recipes-devtools/python/python3/0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch new file mode 100644 index 0000000000..3b0e98bf51 --- /dev/null +++ b/meta/recipes-devtools/python/python3/0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch @@ -0,0 +1,39 @@ +From bcd6e2535cb0dbf72b677eb6bddb644cb035ed51 Mon Sep 17 00:00:00 2001 +From: Colin McAllister +Date: Fri, 13 Feb 2026 11:17:53 -0600 +Subject: [PATCH 1/1] gh-144787: [tests] Allow TLS v1.2 to be minimum version + (GH-144790) + +Allow TLS v1.2 to be minimum version + +Updates test_min_max_version to allow TLS v1.2 to be minimum version if +TLS 1.0 and 1.1 are disabled in OpenSSL. + +Upstream-Status: Backport [https://github.com/python/cpython/commit/f24009feeb78f605a3ee177d9e7cfb63d5890ee1] + +Signed-off-by: Colin Pinnell McAllister +--- + Lib/test/test_ssl.py | 7 ++++++- + 1 file changed, 6 insertions(+), 1 deletion(-) + +diff --git a/Lib/test/test_ssl.py b/Lib/test/test_ssl.py +index 6023c89bca..7e9ba735b3 100644 +--- a/Lib/test/test_ssl.py ++++ b/Lib/test/test_ssl.py +@@ -1156,7 +1156,12 @@ def test_min_max_version(self): + ctx.maximum_version = ssl.TLSVersion.MINIMUM_SUPPORTED + self.assertIn( + ctx.maximum_version, +- {ssl.TLSVersion.TLSv1, ssl.TLSVersion.TLSv1_1, ssl.TLSVersion.SSLv3} ++ { ++ ssl.TLSVersion.TLSv1, ++ ssl.TLSVersion.TLSv1_1, ++ ssl.TLSVersion.TLSv1_2, ++ ssl.TLSVersion.SSLv3, ++ } + ) + + ctx.minimum_version = ssl.TLSVersion.MAXIMUM_SUPPORTED +-- +2.49.1 + diff --git a/meta/recipes-devtools/python/python3_3.14.2.bb b/meta/recipes-devtools/python/python3_3.14.2.bb index 7481e70e13..6324151f4e 100644 --- a/meta/recipes-devtools/python/python3_3.14.2.bb +++ b/meta/recipes-devtools/python/python3_3.14.2.bb @@ -33,6 +33,7 @@ SRC_URI = "http://www.python.org/ftp/python/${PV}/Python-${PV}.tar.xz \ file://0001-test_pyrepl-skip-test_unix_console.test_cursor_back_.patch \ file://0001-test_sysconfig-skip-test_sysconfig.test_sysconfigdat.patch \ file://0001-Skip-flaky-test_default_timeout-tests.patch \ + file://0001-gh-144787-tests-Allow-TLS-v1.2-to-be-minimum-version.patch \ " SRC_URI:append:class-native = " \ file://0001-Lib-sysconfig.py-use-prefix-value-from-build-configu.patch \ From patchwork Fri Feb 13 23:01:28 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Colin Pinnell McAllister X-Patchwork-Id: 81101 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id B1DCCEF99E7 for ; Fri, 13 Feb 2026 23:01:57 +0000 (UTC) Received: from mail-oa1-f44.google.com (mail-oa1-f44.google.com [209.85.160.44]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1788.1771023717149720055 for ; Fri, 13 Feb 2026 15:01:57 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=UzYIQD+v; spf=pass (domain: gmail.com, ip: 209.85.160.44, mailfrom: colinmca242@gmail.com) Received: by mail-oa1-f44.google.com with SMTP id 586e51a60fabf-40ee196dd78so942545fac.1 for ; Fri, 13 Feb 2026 15:01:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771023716; x=1771628516; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=SztaHI7Ju36U5e5JAwpJQi3dQzaCsQNLTNCriRbBw7g=; b=UzYIQD+vXf895hgfCRAWTjJJ35nnIxrW5EomdAsNsFDELo1oxyFc6LnRb01dCbfCDA 9JJzQzLzYCYIxxFP1T1xRArjJ3dbWbyIFIo7Ih+8WsgVRBZtncx6S87PQGW+k4DK35fh N1M84af5C/XvWHnmBGN5S40CRBLYCSsXinImz5wH3J1k07T1fU+uAne00mOVQdZ6Omh2 4DwRovviIAcLWjt9OOV2g1KEnUGXFjn5HqCER9bCDBPfkga8srVMPIJnHibm6b46cHfi XPjConcTQMEXMKU7yRtuejpb+J0xRXnGMk7LvBu1kAfqW7y2W1wrLItRnb1Q2R/15YsB h5FQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771023716; x=1771628516; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=SztaHI7Ju36U5e5JAwpJQi3dQzaCsQNLTNCriRbBw7g=; b=kdP4aeGM6yZGljz0+BgB9CutCxglELoeG32ZVeY3lb5FuAc4P4Suii8Y92tb+hiVaP ASst1NC6seDhb5xIQ5NYZ4Xm0Lgcab5lSsXze+OnKTvpYL7LuhSnmOZGxl5mI7q5se1S xvxGpZXDcd0ZzWiJuNGztYR0AuIg7SLFP1ho/QN/VrSlDW0qGrnAZu/1iSm9xRDWoxLm cwObwzFVJGSZMDwFNaedfeAhjGTE4vX5TRRtvmxPK1kclxBxVkgZ7GJWxs+Et2Cx53R7 7RefGYV8f+PvUyORYIjNiBssFRlCBTFOp73t8J3r8H3jNTkGEQfKZXSVnQWpv29CDq3a fhzg== X-Gm-Message-State: AOJu0YxpzzC/aVmX8OOXfAbU6ugRmOMyIbhNNnSz4cjbi8ABjOoIxieY bNbppxvGM8YVL0weeMDfySf+s8QdIhUohxlyXS0n/QGy3KAPd/gTtlHhUxTUqg== X-Gm-Gg: AZuq6aLggrLWIyIDmBd+HQkV1z3DbUVUsDR8LO7NNP7zfPjuVWSadkL7MNpqqceIF7U pN2WWEABTtZRjS9HrGiHzranNO9+J35TiQ3h8xYh8O4x0zRBn9oOTAM1uguo0D1pv2Ux1DFGlPZ HR95PHp4JWz0RKjsR0qHPfIJ5zza8rHcPOWpXXoD5jA4GWQcL8+C2N2QppknraPPm4SHhM7zgaB iUEdSjCu0fTPWDb/ROfHT11AezSx1SxQ0AV1RveqKA9T9WJ1bl2w3jko5399F2v1oqQDyeZ+f4T BO2ZgPPYgi/aRrU5/BvW6Vgo+CS/WG/RXZZzdLQreQDwTZFw3rNXhF8wyW+4yfQubSpt6yj5pOq gI/gOX5CTzWaZeCCMim8utMtaAMtfpev7iVfvwnSWtqjExm7cFe+lDllE+SBcT5chTGAHyMSjqW mdb+2ppjlWHreDtUFukZM= X-Received: by 2002:a05:6870:f201:b0:408:6661:d517 with SMTP id 586e51a60fabf-40f086eb67fmr993534fac.4.1771023715719; Fri, 13 Feb 2026 15:01:55 -0800 (PST) Received: from fedora ([136.37.200.217]) by smtp.gmail.com with ESMTPSA id 586e51a60fabf-40eaf101db0sm8092157fac.12.2026.02.13.15.01.55 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Feb 2026 15:01:55 -0800 (PST) From: Colin Pinnell McAllister To: openembedded-core@lists.openembedded.org Cc: Colin Pinnell McAllister Subject: [PATCH v2 2/4] openssl: Disable TLS 1.0/1.1 by default Date: Fri, 13 Feb 2026 17:01:28 -0600 Message-ID: <20260213230130.757732-3-colinmca242@gmail.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260213230130.757732-1-colinmca242@gmail.com> References: <20260211184917.1045939-1-colinmca242@gmail.com> <20260213230130.757732-1-colinmca242@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 13 Feb 2026 23:01:57 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231142 TLS 1.0 and TLS 1.1 have been deprecated by the IETF since 2021. Disables support by default in packageconfig, requiring users to explicitly opt-in for these deprecated protocols. Signed-off-by: Colin Pinnell McAllister --- meta/recipes-connectivity/openssl/openssl_3.5.5.bb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/meta/recipes-connectivity/openssl/openssl_3.5.5.bb b/meta/recipes-connectivity/openssl/openssl_3.5.5.bb index c0d02b617b..6b9ccef0b5 100644 --- a/meta/recipes-connectivity/openssl/openssl_3.5.5.bb +++ b/meta/recipes-connectivity/openssl/openssl_3.5.5.bb @@ -29,8 +29,8 @@ PACKAGECONFIG:class-native = "" PACKAGECONFIG:class-nativesdk = "" PACKAGECONFIG[cryptodev-linux] = "enable-devcryptoeng,disable-devcryptoeng,cryptodev-linux,,cryptodev-module" -PACKAGECONFIG[no-tls1] = "no-tls1" -PACKAGECONFIG[no-tls1_1] = "no-tls1_1" +PACKAGECONFIG[tls1] = ",no-tls1" +PACKAGECONFIG[tls1_1] = ",no-tls1_1" PACKAGECONFIG[manpages] = "" PACKAGECONFIG[fips] = "enable-fips" From patchwork Fri Feb 13 23:01:29 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Colin Pinnell McAllister X-Patchwork-Id: 81103 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 69384EF99E8 for ; Fri, 13 Feb 2026 23:02:07 +0000 (UTC) Received: from mail-oi1-f172.google.com (mail-oi1-f172.google.com [209.85.167.172]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.1690.1771023717647110791 for ; Fri, 13 Feb 2026 15:01:57 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=QKzRjrDb; spf=pass (domain: gmail.com, ip: 209.85.167.172, mailfrom: colinmca242@gmail.com) Received: by mail-oi1-f172.google.com with SMTP id 5614622812f47-45f10d7eb81so556706b6e.3 for ; Fri, 13 Feb 2026 15:01:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771023716; x=1771628516; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=HT9oHaxheC9iA8tVPV8URQHKZlZt8bz0ZUhnWAy8tTc=; b=QKzRjrDbybdDJMK2Go82XHugeRUUTaRwJ9sdDQOos4vk2kyttBJGcfGda+t8Kft7OQ XapmwPfoWqNIf+p9gNohDuMcHAqAS+tT5ybPb/yjQA1X+mhYFrvYOGUvHsgm6Pe8bgKf 2VnXOrsmAFSdlFNgX+sOGn9Eu33gY9NEsn4kmYrI07VDGLA7NAajnhNGwh9XqF+j1rDQ IAIEWL9Pyc9DYyKrWH8FbRV0NN8RsthTyXblkbXav9W1hSnuG2C4bntgaNK7O+nb7NYc ERzbVF34X9MRsaCRXqBWKRYKvwZN/2S2crDaC5vhhhSzHFSHhMmTjDhNk3KFZLyn5Igp ugOw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771023716; x=1771628516; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=HT9oHaxheC9iA8tVPV8URQHKZlZt8bz0ZUhnWAy8tTc=; b=osdKuU3Cyt5FifurW9NvKbTGM7BKaM2rda4+Ru376qnEyq+xWbTPBrmGg1cMc54AAP mr02dwdD1JjlRiF/vYJt4Md0QCLyiQ4JxzKCGucCsZ8GYHDI9w7WwRkU01Bf93gcG7/q rdurGx7rMda3KMR4uUowPmzeaPeK+1qEffycvSIydoONBpruuh9ZzkJqEMTfIX27B+HW aYxTTmcwoIuA9NwiUdA6STY7lTMGnpTM6MVwt5bZOfFpvC0W8AVhLEvDTRWmdncFq353 qNqgMc3JwarGxqU/NJN93TL54bZ8ECk/ja92N2oQbfCNIbfqzOHnbgs5I4pKNtYb7p+h nWoQ== X-Gm-Message-State: AOJu0YwQi40oMvVPe5JumNgPFmISbEafkEJrPrxinm+wdAj+tClv3c6H JCyfhm0HDaOPdydxzG2XNPMKtTRU71HgZZR+G7j3R1FCuTvWL7tENo3aVvT8zA== X-Gm-Gg: AZuq6aI4qGOVmy7WBTPU9ASro5fMOFHFYbmT2hqFqVgi3gFlapEgyC2YXmgFOjJUY4j MNFLEjCBfVoUDXD9Q+cp9/HSIlkDwMODmHzV5UMyt+GTXwejsAHfZjiCz9gnwUdzQ1n+RqzGvwz Lzt3QUDtnfF07AW4Dwd0GHQGiHjNAoAa7Ovpp5qGmPglFwZVWfHYKlRXcT2Xd8WegpCKY74axR+ beUmEIu4JqC/o+ZRWljkv9bW3iegxsOvJ2jdJZwdIKhJpSKMl9git8eiN1hscdf02OK2n+929UA vbfyXiR5yGFg8F3FBLDu71VcQgliQEngLJVsBFdjKcQiM0Y/RtAUKjQ4VM+aEVC20YnKhZ7Xv1l QvCMMUH/9nQrP6d6Kz1wUQnmmra8MYXyTRnnh1HkVth92UcFGapOYTtsj+Vj0bLQutYtYKcmDlf Bn5eZLPlpDTokn75tAVnk= X-Received: by 2002:a05:6808:10d6:b0:462:acd3:4c78 with SMTP id 5614622812f47-463b3e6747dmr597059b6e.14.1771023716501; Fri, 13 Feb 2026 15:01:56 -0800 (PST) Received: from fedora ([136.37.200.217]) by smtp.gmail.com with ESMTPSA id 586e51a60fabf-40eaf101db0sm8092157fac.12.2026.02.13.15.01.55 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Feb 2026 15:01:56 -0800 (PST) From: Colin Pinnell McAllister To: openembedded-core@lists.openembedded.org Cc: Colin Pinnell McAllister Subject: [PATCH v2 3/4] openssl: Add legacy packageconfig option Date: Fri, 13 Feb 2026 17:01:29 -0600 Message-ID: <20260213230130.757732-4-colinmca242@gmail.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260213230130.757732-1-colinmca242@gmail.com> References: <20260211184917.1045939-1-colinmca242@gmail.com> <20260213230130.757732-1-colinmca242@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 13 Feb 2026 23:02:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231143 Add packageconfig option to enable legacy support (disabled by default). The legacy module includes deprecated and unmaintained OpenSSL components. Drops openssl-oss-module-legacy from a runtime depends to a runtime recommends for ptest. Signed-off-by: Colin Pinnell McAllister --- v2 changes: * Removed conditional logic to add the legacy package based on the packageconfig setting * Moved ossl-module-legacy back to an rrecommends for libcrypto * Moved ossl-module-legacy to an rrecommends for ptests instead of an rdepends meta/recipes-connectivity/openssl/openssl_3.5.5.bb | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/recipes-connectivity/openssl/openssl_3.5.5.bb b/meta/recipes-connectivity/openssl/openssl_3.5.5.bb index 6b9ccef0b5..7f81b976ba 100644 --- a/meta/recipes-connectivity/openssl/openssl_3.5.5.bb +++ b/meta/recipes-connectivity/openssl/openssl_3.5.5.bb @@ -29,6 +29,7 @@ PACKAGECONFIG:class-native = "" PACKAGECONFIG:class-nativesdk = "" PACKAGECONFIG[cryptodev-linux] = "enable-devcryptoeng,disable-devcryptoeng,cryptodev-linux,,cryptodev-module" +PACKAGECONFIG[legacy] = ",no-legacy" PACKAGECONFIG[tls1] = ",no-tls1" PACKAGECONFIG[tls1_1] = ",no-tls1_1" PACKAGECONFIG[manpages] = "" @@ -277,7 +278,8 @@ CONFFILES:openssl-conf = "${sysconfdir}/ssl/openssl.cnf" RRECOMMENDS:libcrypto += "openssl-conf ${PN}-ossl-module-legacy" RDEPENDS:${PN}-misc = "perl" -RDEPENDS:${PN}-ptest += "openssl-bin perl perl-modules bash sed openssl-engines openssl-ossl-module-legacy" +RDEPENDS:${PN}-ptest += "openssl-bin perl perl-modules bash sed openssl-engines" +RRECOMMENDS:${PN}-ptest += "${PN}-ossl-module-legacy" RDEPENDS:${PN}-bin += "openssl-conf" From patchwork Fri Feb 13 23:01:30 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Colin Pinnell McAllister X-Patchwork-Id: 81102 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 69356EF99E7 for ; Fri, 13 Feb 2026 23:02:07 +0000 (UTC) Received: from mail-oa1-f42.google.com (mail-oa1-f42.google.com [209.85.160.42]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1790.1771023719315413508 for ; Fri, 13 Feb 2026 15:01:59 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@gmail.com header.s=20230601 header.b=FEADF4Hv; spf=pass (domain: gmail.com, ip: 209.85.160.42, mailfrom: colinmca242@gmail.com) Received: by mail-oa1-f42.google.com with SMTP id 586e51a60fabf-40ee196dd78so942562fac.1 for ; Fri, 13 Feb 2026 15:01:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771023718; x=1771628518; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=dZ5z2U+F4Ift3x0Fykk79oXtk/pF0EoKM56SG24NT58=; b=FEADF4HvsCsjlp9Q4K3t4Jq9ok58U/LtfqBfCdEcubTKkZ8im98EtaxrfGL2kCdMGU UjNOYQ81hBTNRzX++fLvjI+74eL9h89p3L6H22vpQRmdZXj7yGX49QBTiZkcC53PeLSX dXbiX73H9U1RBWyvq9vHq7PW9SU+M+jmXpfYho9iezNjUBuIIhfe4AZ0Ch7A3AhSslMN Ov5BaGlM4yJdOLuGsZ1qggbI1FReBXnh9IkABTXWslXthRBRlxl0SAZhtvnToH8wZZFc TmDP1cj0C7tNSZlLjKUxg7q8Ho+oMFEcO3N6kzL8spXjfOKbtEfgJgG6VZntE8gzLAMC NHoQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771023718; x=1771628518; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=dZ5z2U+F4Ift3x0Fykk79oXtk/pF0EoKM56SG24NT58=; b=mHAXo77BBBTKW5eDt5+o8FAR4S48LINunwAdwKx3yMUQ+Ca9kdpkeknZ5pB7bEFxNt /cbVNAD5X56gDW3mvF0Lp2wiJdphKmbPp3GZmewp1lZreEt5fYLwSsctzKcKOzj+sDC5 TPdo2BlKRgB5jg7cNgtSDk55UkfTRo51dz7eoc9Rj5C+90vLWsQsBcYZ5H07gx2hkQCs SbxZBu/br/Djgno8w+1pKKmQX4DLgCcry7sps4JrS2Mw/Eb+NwVOZ02Li9+dLdxQ7o6R HbsNIygHpLmo/+a2jKGq+2tZXdfiGhdrOI27HA5E81rCfRKAUSfawEJyFd9nbt/bpNta kfGg== X-Gm-Message-State: AOJu0Ywot3DvTwSL4+fyK7vFt4fIkoAv/q+G3zTnRWTb2tyrTb6qbcwC fWXIH2GpRv3owCl76AEEO+yIiwvuSL4+ZYSHw1W287jwXYG4dmluPZ84oIgAig== X-Gm-Gg: AZuq6aL/LdJN0rhRLsGlZ9gOgYmZD1cAXXT6T4WVT0pj+QsQH7uhnfU/P8D522eoxQL 5c1iTirNXRNYDvrghCdJmeEpsTrAoI+gzGCAdaCoL5Q4V5vQuKMnseCsHl2nH7+7zRGsr0oiLBS 3uNx80G9QcsFsUtVC4ghrv6V/eNbejMDq2WqFRngaNr8Zd1ew5ThdynuljAx3NwJCZf1/NMcsMR 3zbr2bryhZBA3AwmKpT6hpOaXEJgZSoB5VL5aw6JPHCsrmwSzcba7+5KPGPrzQV64nLNSNAXFwf GKgJlJPZkmH75eBbddRbmCKheqI+OcQg7g+d9MlU/3pJD3wM8SVEIVz0lVvPXpFCGO+V4665oyU C6oo90ZzBEJaa6QN1OwuSGYHuwx1k9WbY/5RDhwsRXOr9X8b98qyhwXK0UY0EK6NB61ly0S2ucK CjipHzJKUEhMDVSAFavxg= X-Received: by 2002:a05:6871:297:b0:40e:f108:5903 with SMTP id 586e51a60fabf-40f088fffe5mr1060496fac.16.1771023718059; Fri, 13 Feb 2026 15:01:58 -0800 (PST) Received: from fedora ([136.37.200.217]) by smtp.gmail.com with ESMTPSA id 586e51a60fabf-40eaf101db0sm8092157fac.12.2026.02.13.15.01.56 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Feb 2026 15:01:56 -0800 (PST) From: Colin Pinnell McAllister To: openembedded-core@lists.openembedded.org Cc: Colin Pinnell McAllister Subject: [PATCH v2 4/4] python3-cryptography: Disable legacy-openssl by default Date: Fri, 13 Feb 2026 17:01:30 -0600 Message-ID: <20260213230130.757732-5-colinmca242@gmail.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260213230130.757732-1-colinmca242@gmail.com> References: <20260211184917.1045939-1-colinmca242@gmail.com> <20260213230130.757732-1-colinmca242@gmail.com> MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Fri, 13 Feb 2026 23:02:07 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/231144 Disable legacy-openssl support by default to match the openssl recipe. Signed-off-by: Colin Pinnell McAllister --- meta/recipes-devtools/python/python3-cryptography.bb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/recipes-devtools/python/python3-cryptography.bb b/meta/recipes-devtools/python/python3-cryptography.bb index 366fda5e87..062b41807b 100644 --- a/meta/recipes-devtools/python/python3-cryptography.bb +++ b/meta/recipes-devtools/python/python3-cryptography.bb @@ -22,7 +22,7 @@ require ${BPN}-crates.inc inherit pypi python_maturin cargo-update-recipe-crates pkgconfig -PACKAGECONFIG ??= "legacy-openssl" +PACKAGECONFIG ??= "" PACKAGECONFIG[legacy-openssl] = ",,,openssl-ossl-module-legacy" export CRYPTOGRAPHY_BUILD_OPENSSL_NO_LEGACY = "${@bb.utils.contains('PACKAGECONFIG', 'legacy-openssl', '0', '1', d)}"