| 19 May 2023 |
 hexa | ruby_3_0Packages.openssl | 22:51:11 |
 raitobezarius | Give me a ec | 22:51:16 |
| raitobezarius | * Give me a sec | 22:51:17 |
| raitobezarius | you see | 22:52:05 |
| raitobezarius | '' + opString (ver.majMin == "3.0" && opensslSupport) ''
# Replace the Gem by a OpenSSL3-compatible one.
echo "Hotpatching the OpenSSL gem with a 3.x series for OpenSSL 3 support..."
cp -vr ${openssl3Gem}/ext/openssl $sourceRoot/ext/
cp -vr ${openssl3Gem}/lib/ $sourceRoot/ext/openssl/
cp -vr ${openssl3Gem}/{History.md,openssl.gemspec} $sourceRoot/ext/openssl/
'';
| 22:52:07 |
| raitobezarius | remove opensslSupport from there | 22:52:11 |
| raitobezarius | and retry | 22:52:12 |
| raitobezarius | this should hotpatch in all the cases | 22:52:17 |
| raitobezarius | providing you a fresh and secure openssl gem | 22:52:22 |
| raitobezarius | discourse: 🔴
bitwarden: 🔴
github-runner: 🔴 (https://github.com/actions/runner-images/discussions/5429)
| 22:59:03 |
| raitobezarius | what the hell: https://github.com/bitwarden/clients/commit/9a41d5dc6f15e3e0df824891b063a32074340e38 | 23:05:50 |
| raitobezarius | there is no tag containing this change?? | 23:05:55 |
| raitobezarius | and 3 weeks ago… | 23:06:00 |
| raitobezarius | latest release is one week ago | 23:06:05 |
| raitobezarius | https://discourse.nixos.org/t/breaking-changes-announcement-for-unstable/17574/26 wrote this | 23:07:54 |
| raitobezarius | hexa: I'm in favor of letting Node.js 16 and OpenSSL 1.1 to be part of the cache until their actual death for this release | 23:44:29 |
| raitobezarius | What do you think? (open to everyone on this channel) | 23:44:35 |
| hexa | Not sure how | 23:52:15 |
| raitobezarius | We change the logic in Hydra or nixpkgs to add those as exceptions | 23:53:57 |
| raitobezarius | I can do the changes as long as someone from infra can review them | 23:54:06 |
| hexa | good luck with that | 23:59:48 |
| 20 May 2023 |
| raitobezarius | https://github.com/NixOS/nixpkgs/blob/1362b2c8d6d82c435bc428292b5868c42e443ad9/pkgs/stdenv/generic/check-meta.nix#L384 | 00:10:53 |
| raitobezarius | The fix has to be done here I guess | 00:10:59 |
| raitobezarius | Turn the "no" into a "warn" if this an insecure exception | 00:12:10 |
| raitobezarius | Actually I wonder if we should not let go this crisis to waste | 00:16:32 |
| raitobezarius | And introduce a willBeEOL flag or something | 00:16:48 |
