[Bug 1495985] Review Request: libcouchbase - the driver for Couchbase Server

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=1495985



--- Comment #32 from Sergey Avseyev <sergey.avseyev@xxxxxxxxx> ---
According to the https://fedoraproject.org/wiki/Packaging:CryptoPolicies, it
should be enough to use "PROFILE=SYSTEM", but rpmlint still complains.

The library after patching has the only place, where I use
SSL_CTX_set_cipher_list:

$ grep -Rni SSL_CTX_set_cipher_list rpmbuild/BUILD/libcouchbase-2.8.1
rpmbuild/BUILD/libcouchbase-2.8.1/src/ssl/ssl_common.c:280:   
SSL_CTX_set_cipher_list(ret->ctx, "PROFILE=SYSTEM");

I would call it false-positive, as rpmlint does something primitive like this:

$ strings /usr/lib64/libcouchbase.so.2.0.49 | grep SSL_CTX_set_cipher_list
SSL_CTX_set_cipher_list

Which obviously does not actually check the arguments.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite Conditions]     [KDE Users]

  Powered by Linux