[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[PULL 10/17] crypto: bump min gcrypt to 1.8.0, dropping RHEL-7 support
From: |
Thomas Huth |
Subject: |
[PULL 10/17] crypto: bump min gcrypt to 1.8.0, dropping RHEL-7 support |
Date: |
Wed, 2 Jun 2021 09:35:59 +0200 |
From: Daniel P. Berrangé <berrange@redhat.com>
It has been over two years since RHEL-8 was released, and thus per the
platform build policy, we no longer need to support RHEL-7 as a build
target. This lets us increment the minimum required gcrypt version and
assume that HMAC is always supported
Per repology, current shipping versions are:
RHEL-8: 1.8.5
Debian Buster: 1.8.4
openSUSE Leap 15.2: 1.8.2
Ubuntu LTS 18.04: 1.8.1
Ubuntu LTS 20.04: 1.8.5
FreeBSD: 1.9.2
Fedora 33: 1.8.6
Fedora 34: 1.9.3
OpenBSD: 1.9.3
macOS HomeBrew: 1.9.3
Ubuntu LTS 18.04 has the oldest version and so 1.8.0 is the new minimum.
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
Message-Id: <20210514120415.1368922-6-berrange@redhat.com>
Reviewed-by: Thomas Huth <thuth@redhat.com>
[thuth: rebased to use .gitlab-ci.d/buildtest.yml]
Signed-off-by: Thomas Huth <thuth@redhat.com>
---
.gitlab-ci.d/buildtest.yml | 10 ----------
configure | 18 +-----------------
crypto/meson.build | 6 +-----
3 files changed, 2 insertions(+), 32 deletions(-)
diff --git a/.gitlab-ci.d/buildtest.yml b/.gitlab-ci.d/buildtest.yml
index a86c27fdbe..fe44a5c2be 100644
--- a/.gitlab-ci.d/buildtest.yml
+++ b/.gitlab-ci.d/buildtest.yml
@@ -630,16 +630,6 @@ build-coroutine-sigaltstack:
#
# These jobs test old gcrypt and nettle from RHEL7
# which had some API differences.
-crypto-old-gcrypt:
- extends: .native_build_job_template
- needs:
- job: amd64-centos7-container
- variables:
- IMAGE: centos7
- TARGETS: x86_64-softmmu x86_64-linux-user
- CONFIGURE_ARGS: --disable-nettle --enable-gcrypt
- MAKE_CHECK_ARGS: check
-
crypto-only-gnutls:
extends: .native_build_job_template
needs:
diff --git a/configure b/configure
index fddda94c63..fb8c5187e8 100755
--- a/configure
+++ b/configure
@@ -407,7 +407,6 @@ gnutls="$default_feature"
nettle="$default_feature"
nettle_xts="no"
gcrypt="$default_feature"
-gcrypt_hmac="no"
gcrypt_xts="no"
qemu_private_xts="yes"
auth_pam="$default_feature"
@@ -2860,7 +2859,7 @@ has_libgcrypt() {
maj=`libgcrypt-config --version | awk -F . '{print $1}'`
min=`libgcrypt-config --version | awk -F . '{print $2}'`
- if test $maj != 1 || test $min -lt 5
+ if test $maj != 1 || test $min -lt 8
then
return 1
fi
@@ -2926,18 +2925,6 @@ if test "$gcrypt" != "no"; then
gcrypt="yes"
cat > $TMPC << EOF
#include <gcrypt.h>
-int main(void) {
- gcry_mac_hd_t handle;
- gcry_mac_open(&handle, GCRY_MAC_HMAC_MD5,
- GCRY_MAC_FLAG_SECURE, NULL);
- return 0;
-}
-EOF
- if compile_prog "$gcrypt_cflags" "$gcrypt_libs" ; then
- gcrypt_hmac=yes
- fi
- cat > $TMPC << EOF
-#include <gcrypt.h>
int main(void) {
gcry_cipher_hd_t handle;
gcry_cipher_open(&handle, GCRY_CIPHER_AES, GCRY_CIPHER_MODE_XTS, 0);
@@ -5721,9 +5708,6 @@ if test "$gnutls" = "yes" ; then
fi
if test "$gcrypt" = "yes" ; then
echo "CONFIG_GCRYPT=y" >> $config_host_mak
- if test "$gcrypt_hmac" = "yes" ; then
- echo "CONFIG_GCRYPT_HMAC=y" >> $config_host_mak
- fi
echo "GCRYPT_CFLAGS=$gcrypt_cflags" >> $config_host_mak
echo "GCRYPT_LIBS=$gcrypt_libs" >> $config_host_mak
fi
diff --git a/crypto/meson.build b/crypto/meson.build
index 7f37b5d335..af7e80c6f6 100644
--- a/crypto/meson.build
+++ b/crypto/meson.build
@@ -26,11 +26,7 @@ if 'CONFIG_NETTLE' in config_host
crypto_ss.add(files('hash-nettle.c', 'hmac-nettle.c', 'pbkdf-nettle.c'))
elif 'CONFIG_GCRYPT' in config_host
crypto_ss.add(files('hash-gcrypt.c', 'pbkdf-gcrypt.c'))
- if 'CONFIG_GCRYPT_HMAC' in config_host
- crypto_ss.add(files('hmac-gcrypt.c'))
- else
- crypto_ss.add(files('hmac-glib.c'))
- endif
+ crypto_ss.add(files('hmac-gcrypt.c'))
else
crypto_ss.add(files('hash-glib.c', 'hmac-glib.c', 'pbkdf-stub.c'))
endif
--
2.27.0
- [PULL 00/17] doc updates and CentOS 7 removal, Thomas Huth, 2021/06/02
- [PULL 02/17] docs: fix references to docs/devel/atomics.rst, Thomas Huth, 2021/06/02
- [PULL 03/17] docs: fix references to docs/devel/build-system.rst, Thomas Huth, 2021/06/02
- [PULL 04/17] docs: fix references to docs/specs/tpm.rst, Thomas Huth, 2021/06/02
- [PULL 01/17] docs: fix references to docs/devel/tracing.rst, Thomas Huth, 2021/06/02
- [PULL 05/17] docs: fix references to docs/devel/s390-dasd-ipl.rst, Thomas Huth, 2021/06/02
- [PULL 07/17] patchew: move quick build job from CentOS 7 to CentOS 8 container, Thomas Huth, 2021/06/02
- [PULL 09/17] crypto: drop back compatibility typedefs for nettle, Thomas Huth, 2021/06/02
- [PULL 06/17] block/ssh: Bump minimum libssh version to 0.8.7, Thomas Huth, 2021/06/02
- [PULL 10/17] crypto: bump min gcrypt to 1.8.0, dropping RHEL-7 support,
Thomas Huth <=
- [PULL 08/17] crypto: bump min nettle to 3.4, dropping RHEL-7 support, Thomas Huth, 2021/06/02
- [PULL 11/17] crypto: bump min gnutls to 3.5.18, dropping RHEL-7 support, Thomas Huth, 2021/06/02
- [PULL 12/17] crypto: drop used conditional check, Thomas Huth, 2021/06/02
- [PULL 14/17] tests/docker: drop CentOS 7 container, Thomas Huth, 2021/06/02
- [PULL 13/17] tests/vm: convert centos VM recipe to CentOS 8, Thomas Huth, 2021/06/02
- [PULL 15/17] configure: bump min required glib version to 2.56, Thomas Huth, 2021/06/02
- [PULL 16/17] configure: bump min required GCC to 7.5.0, Thomas Huth, 2021/06/02
- [PULL 17/17] configure: bump min required CLang to 6.0 / XCode 10.0, Thomas Huth, 2021/06/02
- Re: [PULL 00/17] doc updates and CentOS 7 removal, Peter Maydell, 2021/06/02