Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Jorie Tappa updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Jorie Tappa Labels: needs_epic resolved-issue-added Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Geoff Nichols assigned an issue to Unassigned Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Geoff Nichols Assignee: Geoff Nichols Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Geoff Nichols commented on PUP-7383 Re: Puppet with openssl 1.1 fails Merged to puppet#stable at https://github.com/puppetlabs/puppet/commit/8b112c4bea7f33b98f0753c2d2e09bc231201684. Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Tim Meusel commented on PUP-7383 Re: Puppet with openssl 1.1 fails thank youu Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Josh Cooper Fix Version/s: PUP 5.0.0 Fix Version/s: PUP 4.10.2 Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Josh Cooper commented on PUP-7383 Re: Puppet with openssl 1.1 fails Sure I'll cherry-pick to stable Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title John Duarte commented on PUP-7383 Re: Puppet with openssl 1.1 fails Geoff Nichols, Josh Cooper should this be applied to puppet 4.x as well? Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title John Duarte assigned an issue to Geoff Nichols Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: John Duarte Assignee: Geoff Nichols Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title John Duarte updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: John Duarte QA Risk Assessment: Manual No Action Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Tim Meusel commented on PUP-7383 Re: Puppet with openssl 1.1 fails Fixing this only in puppet5.0 is no proper solution in my opinion. As far as I know there won't be any stable release for puppet5 in the next few months. Is it possible to fix this also in puppet4.X? Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Josh Cooper assigned an issue to qa Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Josh Cooper Status: Ready for CI Test Assignee: Josh Cooper qa Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Josh Cooper Release Notes Summary: All puppet commands would fail when running puppet as a gem or from source with system ruby 2.4 or greater + and openssl 1 . 1.0+. Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Josh Cooper Release Notes Summary: All puppet commands would fail when running puppet as a gem or from source with system ruby 2.4 or greater. Release Notes: Bug Fix Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title John Duarte updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: John Duarte QA Risk Assessment: Needs Assessment Manual Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Michael Smith commented on PUP-7383 Re: Puppet with openssl 1.1 fails Looks like the exact same thing applies to mcollective (MCO-804). Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Maggie Dreyer assigned an issue to Josh Cooper Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Maggie Dreyer Assignee: Josh Cooper Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Maggie Dreyer updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Maggie Dreyer Sprint: Agent 2017-05-31 Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Maggie Dreyer updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Maggie Dreyer Story Points: 1 Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Josh Cooper Fix Version/s: PUP 5.y Fix Version/s: PUP 5.0.0 Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Josh Cooper updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Josh Cooper Labels: needs_epic triaged Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Tim Meusel commented on PUP-7383 Re: Puppet with openssl 1.1 fails Hi, this is a really annoying bug, I can't develop on Arch Linux without monkey patching the monkey patch. Can we do something to get this fixed sooner than later? The Arch Linux packages are fixed, but the gem version of puppet doesn't work out of the box Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Shawn Bohrer commented on PUP-7383 Re: Puppet with openssl 1.1 fails I'm running into this on Fedora 26 and based on the description above the following fixes the problem for me: --- /tmp/monkey_patches.rb 2017-05-12 14:19:07.438741496 -0500 +++ /usr/share/ruby/vendor_ruby/puppet/util/monkey_patches.rb 2017-05-11 13:04:41.510885324 -0500 @@ -101,7 +101,9 @@ else DEFAULT_PARAMS[:options] = OpenSSL::SSL::OP_NO_SSLv2 | OpenSSL::SSL::OP_NO_SSLv3 end - DEFAULT_PARAMS[:ciphers] << ':!SSLv2' + if DEFAULT_PARAMS[:ciphers] +DEFAULT_PARAMS[:ciphers] << ':!SSLv2' + end
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Andrey Galkin commented on PUP-7383 Re: Puppet with openssl 1.1 fails I guess Puppet team looks at this item as not important, but this leads to puppet gem not being usable for module developers on newer systems. The fix seems to be as trivial enough as adding a simple "if". The issue may eventually spread to other OSes like Fedora 26+: https://bugzilla.redhat.com/show_bug.cgi?id=1440710 Please consider proactively adding this one-line fix to next patch release. Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Dominic Cleal commented on PUP-7383 Re: Puppet with openssl 1.1 fails This looks like an incompatibility of the Puppet monkey patch with Ruby 2.4 when using OpenSSL 1.1.0 or higher. Ruby 2.4 only sets a default ciphers list of its own on OpenSSL versions older than 1.1 (https://github.com/ruby/ruby/commit/c9dc016#diff-8406e11e4a42f9de6badcd0f6a6c4262R33), so this monkey patch is trying to modify an array that's no longer present. The Ruby OpenSSL commit (https://github.com/ruby/openssl/commit/b9aea27) that removed it suggest the cipher list in 1.1.0 is secure enough by default, and the list in the commit doesn't list any SSLv2 ciphers, which is what Puppet's trying to disable. Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Geoff Nichols updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Geoff Nichols Labels: needs_epic Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Geoff Nichols updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Geoff Nichols Sprint: Agent Triage Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Geoff Nichols updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Geoff Nichols Fix Version/s: PUP 5.y Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Eric Delaney updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Eric Delaney Team: Agent Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Eric Delaney updated an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Change By: Eric Delaney Sprint: Agent Triage Add Comment This message was sent by Atlassian JIRA (v6.4.14#64029-sha1:ae256fe) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at https://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/d/optout.
Jira (PUP-7383) Puppet with openssl 1.1 fails
Title: Message Title Jonathan Steel created an issue Puppet / PUP-7383 Puppet with openssl 1.1 fails Issue Type: Bug Affects Versions: PUP 4.9.4 Assignee: Unassigned Created: 2017/03/22 2:29 AM Environment: Arch Linux Priority: Normal Reporter: Jonathan Steel Updating from openssl 1.0 to 1.1 breaks puppet: puppet --version /usr/lib/ruby/vendor_ruby/2.4.0/puppet/util/monkey_patches.rb:104:in `': undefined method `<<' for nil:NilClass (NoMethodError) from /usr/lib/ruby/vendor_ruby/2.4.0/puppet/util/monkey_patches.rb:98:in `' from /usr/lib/ruby/2.4.0/rubygems/core_ext/kernel_require.rb:55:in `require' from /usr/lib/ruby/2.4.0/rubygems/core_ext/kernel_require.rb:55:in `require' from /usr/lib/ruby/vendor_ruby/2.4.0/puppet/util.rb:16:in `' from /usr/lib/ruby/vendor_ruby/2.4.0/puppet/util.rb:15:in `' from /usr/lib/ruby/vendor_ruby/2.4.0/puppet/util.rb:14:in `' from /usr/lib/ruby/2.4.0/rubygems/core_ext/kernel_require.rb:55:in `require' from /usr/lib/ruby/2.4.0/rubygems/core_ext/kernel_require.rb:55:in `require' from /usr/lib/ruby/vendor_ruby/2.4.0/puppet.rb:14:in `' from /usr/lib/ruby/2.4.0/rubygems/core_ext/kernel_require.rb:55:in `require' from
