Bug#1032070: Update openssl gem to 3.0.1 to fix Exception: EVP_PKEY_new_mac_key: malloc failure

[Pirate Praveen]

Package: libruby3.1
Severity: important
Version: 3.1.2-6

While testing gitlab 15.6.8 on experimental, gitlab-rake gitlab:check
command failed with following error,

Checking Gitaly ...

Gitaly: ... Exception: EVP_PKEY_new_mac_key: malloc failure

Checking Gitaly ... Finished

Looking around for this error, I found
https://stackoverflow.com/questions/74300774/opensslhmacerror-evp-pkey-new-mac-key-malloc-failure-in-rails-app
and from there
https://github.com/jwt/ruby-jwt/pull/530#discussion_r1002904506 which
indicated this is fixed in openssl 3.0.1 gem. Does ruby 3.1.3 include
openssl 3.0.1? If not, can we update just the openssl part?

This will help us to run gitlab on bookworm eventually.

[Pirate Praveen]

On Mon, 27 Feb 2023 16:53:19 +0530 Pirate Praveen
<pra...@onenetbeyond.org> wrote:
> Control: affects -1 gitlab

Since gitlab is in contrib, as a workaround we are installing openssl
3.0.2 gem in postinst.

https://salsa.debian.org/ruby-team/gitlab/-/commit/08fe0d965d01db3f4ece15c664b54c169890eda7

We can remove the workaround once this is fixed in libruby3.1

[Pirate Praveen]

On Sun, 05 Mar 2023 23:35:28 +0000 Debian FTP Masters
<ftpm...@ftp-master.debian.org> wrote:
> Format: 1.8
> Date: Sun, 05 Mar 2023 17:13:36 -0300
> Source: ruby3.1
> Architecture: source
> Version: 3.1.2-7~exp
> Distribution: experimental
> Urgency: medium
> Maintainer: Debian Ruby Team
<pkg-ruby-extr...@lists.alioth.debian.org>
> Changed-By: Antonio Terceiro <terc...@debian.org>
> Closes: 1032070
> Changes:
> ruby3.1 (3.1.2-7~exp) experimental; urgency=medium
> .
> * Update openssl extension to to 3.0.1 (Closes: #1032070)

Are you planning to upload this to bookworm? We are starting to test
gitlab on bookworm to be able to provide gitlab via bookworm-fasttrack
when bookworm releases. I hit this issue today when testing gitlab on
bookworm.

[Pirate Praveen]

On Wed, 15 Mar 2023 01:05:14 +0530 Pirate Praveen
<pra...@onenetbeyond.org> wrote:
> Are you planning to upload this to bookworm? We are starting to test
> gitlab on bookworm to be able to provide gitlab via
bookworm-fasttrack
> when bookworm releases. I hit this issue today when testing gitlab on
> bookworm.

I tried rebuilding ruby in bookworm, but one test failed. Not sure if
this is a random failure or is it actually using the internet?

See #1033395

[Antonio Terceiro]

On Fri, Mar 24, 2023 at 02:23:07PM +0530, Pirate Praveen wrote:
> On Wed, 15 Mar 2023 01:05:14 +0530 Pirate Praveen <pra...@onenetbeyond.org>
> wrote:
> > Are you planning to upload this to bookworm? We are starting to test
> > gitlab on bookworm to be able to provide gitlab via bookworm-fasttrack
> > when bookworm releases. I hit this issue today when testing gitlab on
> > bookworm.

I uploaded it yesterday and there is an unblock request already in
place.

> I tried rebuilding ruby in bookworm, but one test failed. Not sure if this
> is a random failure or is it actually using the internet?
>
> See #1033395

I didn't really try on bookworm, but the difference between it and sid
at this point is probably small and it just worked for me and on the
buildds. it might be random.