pkg/46010: [LINUX] package lang/python26 fails to install

[slitvinov%gmail.com@localhost]

>Number:         46010
>Category:       pkg
>Synopsis:       [LINUX] package lang/python26 fails to install
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    pkg-manager
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Feb 12 20:20:00 +0000 2012
>Originator:     Litvinov Sergey
>Release:        Ubuntu Linux
>Organization:
>Environment:
Linux desktop 3.0.0-15-generic #26-Ubuntu SMP Fri Jan 20 15:59:53 UTC 2012 i686 
athlon i386 GNU/Linux
>Description:
Installation of lang/python26 fails because _ssl.so was not built.

==== from make log  ====
running install_egg_info
Writing 
//media/sdb2/src/pkgsrc/lang/python26/work/.destdir/home/vital303/netbsd/lib/python2.6/lib-dynload/Python-2.6.7-py2.6.egg-info
=> Automatic manual page handling
pkg_create: can't stat 
`/media/sdb2/src/pkgsrc/lang/python26/work/.destdir/home/vital303/netbsd/lib/python2.6/lib-dynload/_ssl.so'
===> Building binary package for python26-2.6.7nb1
=> Creating binary package 
/media/sdb2/src/pkgsrc/packages/All/python26-2.6.7nb1.tgz
pkg_create: can't stat 
`/media/sdb2/src/pkgsrc/lang/python26/work/.destdir/home/vital303/netbsd/lib/python2.6/lib-dynload/_ssl.so'
pkg_create: lstat failed for file lib/python2.6/lib-dynload/_ssl.so: No such 
file or directory
*** Error code 2

Stop.
bmake: stopped in /media/sdb2/src/pkgsrc/lang/python26
*** Error code 1

Stop.
bmake: stopped in /media/sdb2/src/pkgsrc/lang/python26
=================

From PKG_DEBUG_LEVEL=2 log
==== from make log ====
*** WARNING: renaming "_ssl" since importing it failed: 
build/lib.linux-i686-2.6/_ssl.so: undefined symbol: SSLv2_method

Failed to find the necessary bits to build these modules:
_tkinter           gdbm               linuxaudiodev   
ossaudiodev        sunaudiodev                        
To find the necessary bits, look in setup.py in detect_modules() for the 
module's name.


Failed to build these modules:
_ssl                                                  
=================

It seems Ubuntu version of openssl does not have a SSLv2_method.
http://stackoverflow.com/questions/8206546/undefined-symbol-sslv2-method

>How-To-Repeat:
bmake install
in
lang/python26 on Linux with no SSLv2_method in openssl.
>Fix:
I applied three local patches to remove SSLv2_method from Python. It
is not a patch proposal just an illustration.

$NetBSD$

--- Modules/_ssl.c.orig 2010-08-03 18:50:32.000000000 +0000
+++ Modules/_ssl.c
@@ -62,7 +62,6 @@ enum py_ssl_cert_requirements {
 };
 
 enum py_ssl_version {
-    PY_SSL_VERSION_SSL2,
     PY_SSL_VERSION_SSL3,
     PY_SSL_VERSION_SSL23,
     PY_SSL_VERSION_TLS1
@@ -302,8 +301,6 @@ newPySSLObject(PySocketSockObject *Sock,
         self->ctx = SSL_CTX_new(TLSv1_method()); /* Set up context */
     else if (proto_version == PY_SSL_VERSION_SSL3)
         self->ctx = SSL_CTX_new(SSLv3_method()); /* Set up context */
-    else if (proto_version == PY_SSL_VERSION_SSL2)
-        self->ctx = SSL_CTX_new(SSLv2_method()); /* Set up context */
     else if (proto_version == PY_SSL_VERSION_SSL23)
         self->ctx = SSL_CTX_new(SSLv23_method()); /* Set up context */
     PySSL_END_ALLOW_THREADS
@@ -1687,8 +1684,6 @@ init_ssl(void)
                             PY_SSL_CERT_REQUIRED);
 
     /* protocol versions */
-    PyModule_AddIntConstant(m, "PROTOCOL_SSLv2",
-                            PY_SSL_VERSION_SSL2);
     PyModule_AddIntConstant(m, "PROTOCOL_SSLv3",
                             PY_SSL_VERSION_SSL3);
     PyModule_AddIntConstant(m, "PROTOCOL_SSLv23",
$NetBSD$

--- Lib/test/test_ssl.py.orig   2010-08-02 19:56:05.000000000 +0000
+++ Lib/test/test_ssl.py
@@ -58,7 +58,6 @@ class BasicTests(unittest.TestCase):
                 raise
 
     def test_constants(self):
-        ssl.PROTOCOL_SSLv2
         ssl.PROTOCOL_SSLv23
         ssl.PROTOCOL_SSLv3
         ssl.PROTOCOL_TLSv1
@@ -829,19 +828,6 @@ else:
             bad_cert_test(os.path.join(os.path.dirname(__file__) or os.curdir,
                                        "badkey.pem"))
 
-        def test_protocol_sslv2(self):
-            """Connecting to an SSLv2 server with various client options"""
-            if test_support.verbose:
-                sys.stdout.write("\ntest_protocol_sslv2 disabled, "
-                                 "as it fails on OpenSSL 1.0.0+")
-            return
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv2, True)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv2, True, 
ssl.CERT_OPTIONAL)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv2, True, 
ssl.CERT_REQUIRED)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv23, True)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_SSLv3, False)
-            try_protocol_combo(ssl.PROTOCOL_SSLv2, ssl.PROTOCOL_TLSv1, False)
-
         def test_protocol_sslv23(self):
             """Connecting to an SSLv23 server with various client options"""
             if test_support.verbose:
@@ -877,7 +863,6 @@ else:
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv3, True)
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv3, True, 
ssl.CERT_OPTIONAL)
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv3, True, 
ssl.CERT_REQUIRED)
-            try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv2, False)
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_SSLv23, False)
             try_protocol_combo(ssl.PROTOCOL_SSLv3, ssl.PROTOCOL_TLSv1, False)
 
@@ -890,7 +875,6 @@ else:
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_TLSv1, True)
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_TLSv1, True, 
ssl.CERT_OPTIONAL)
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_TLSv1, True, 
ssl.CERT_REQUIRED)
-            try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_SSLv2, False)
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_SSLv3, False)
             try_protocol_combo(ssl.PROTOCOL_TLSv1, ssl.PROTOCOL_SSLv23, False)
 
$NetBSD$

--- Lib/ssl.py.orig     2010-04-27 22:05:18.000000000 +0000
+++ Lib/ssl.py
@@ -49,7 +49,6 @@ CERT_REQUIRED - certificates are require
 
 The following constants identify various SSL protocol variants:
 
-PROTOCOL_SSLv2
 PROTOCOL_SSLv3
 PROTOCOL_SSLv23
 PROTOCOL_TLSv1
@@ -61,7 +60,7 @@ import _ssl             # if we can't im
 
 from _ssl import SSLError
 from _ssl import CERT_NONE, CERT_OPTIONAL, CERT_REQUIRED
-from _ssl import PROTOCOL_SSLv2, PROTOCOL_SSLv3, PROTOCOL_SSLv23, 
PROTOCOL_TLSv1
+from _ssl import PROTOCOL_SSLv3, PROTOCOL_SSLv23, PROTOCOL_TLSv1
 from _ssl import RAND_status, RAND_egd, RAND_add
 from _ssl import \
      SSL_ERROR_ZERO_RETURN, \
@@ -406,8 +405,6 @@ def get_protocol_name(protocol_code):
         return "TLSv1"
     elif protocol_code == PROTOCOL_SSLv23:
         return "SSLv23"
-    elif protocol_code == PROTOCOL_SSLv2:
-        return "SSLv2"
     elif protocol_code == PROTOCOL_SSLv3:
         return "SSLv3"
     else: