tyler.durden
/
icinga2
mirror of https://github.com/Icinga/icinga2.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Require openssl1 on sles11sp3 from Security Module 

There is a severe problem with SSL certificate verification
described in #9549 which renders client communication
unusable. The OpenSSL 0.9.8j version in SLES11 is buggy
and does not allow to verify clients on the master,
nor does a manual openssl verification work.

We'll therefore switch to the openssl1 package provided
by the SLES 11 Security Module and link against their
working API in order to resolve the problem in clusters
and client setups.

fixes #9549
This commit is contained in:
Michael Friedrich 2015-07-06 11:41:50 +02:00
parent 29af3be7c3
commit 3c1aec4831
3 changed files with 13 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
INSTALL.md
View File

@ -21,7 +21,8 @@ parentheses):
* cmake
* GNU make (make)
* C++ compiler (gcc-c++ >= 4.7 on RHEL/SUSE, build-essential on Debian, alternatively clang++)
* OpenSSL library and header files (openssl-devel on RHEL, libssl-dev on Debian)
* OpenSSL library and header files >= 0.9.8 (openssl-devel on RHEL, libopenssl1-devel on SLES11,
libopenssl-devel on SLES11, libssl-dev on Debian)
* Boost library and header files (boost-devel on RHEL, libboost-all-dev on Debian)
* GNU bison (bison)
* GNU flex (flex) >= 2.5.35

13
doc/2-getting-started.md
View File

@ -46,6 +46,11 @@ RHEL/CentOS:
# curl -o /etc/yum.repos.d/ICINGA-release.repo http://packages.icinga.org/epel/ICINGA-release.repo
# yum makecache
The packages for RHEL/CentOS depend on other packages which are distributed
as part of the [EPEL repository](http://fedoraproject.org/wiki/EPEL). Please
make sure to enable this repository by following
[these instructions](http://fedoraproject.org/wiki/EPEL#How_can_I_use_these_extra_packages.3F).
Fedora:
# rpm --import http://packages.icinga.org/icinga.key
@ -57,6 +62,9 @@ SLES 11:
# zypper ar http://packages.icinga.org/SUSE/ICINGA-release-11.repo
# zypper ref
The packages for SLES 11 depend on the `openssl1` package which is distributed
as part of the [SLES 11 Security Module](https://www.suse.com/communities/conversations/introducing-the-suse-linux-enterprise-11-security-module/).
SLES 12:
# zypper ar http://packages.icinga.org/SUSE/ICINGA-release.repo
@ -67,11 +75,6 @@ openSUSE:
# zypper ar http://packages.icinga.org/openSUSE/ICINGA-release.repo
# zypper ref
The packages for RHEL/CentOS depend on other packages which are distributed
as part of the [EPEL repository](http://fedoraproject.org/wiki/EPEL). Please
make sure to enable this repository by following
[these instructions](http://fedoraproject.org/wiki/EPEL#How_can_I_use_these_extra_packages.3F).
### <a id="installing-icinga2"></a> Installing Icinga 2
You can install Icinga 2 by using your distribution's package manager

5
icinga2.spec
View File

@ -92,13 +92,14 @@ BuildRequires: libyajl-devel
%endif
BuildRequires: libedit-devel
BuildRequires: ncurses-devel
BuildRequires: openssl-devel
%if "%{_vendor}" == "suse" && 0%{?suse_version} < 1310
%if "%{_vendor}" == "suse" && 0%{?suse_version} < 1210
BuildRequires: gcc47-c++
BuildRequires: libstdc++47-devel
BuildRequires: libopenssl1-devel
%else
BuildRequires: gcc-c++
BuildRequires: libstdc++-devel
BuildRequires: openssl-devel
%endif
BuildRequires: cmake
BuildRequires: flex >= 2.5.35