'from OpenSSL import crypto' gives undefined symbol: SSLv2_method

[daira]

AF saw the following problem while trying to run Tahoe-LAFS:

• found that openssl has a different error here:

  # PYTHONPATH=support/lib/python2.7/site-packages/ python -c 'from OpenSSL
  import cry
  pto'
  Traceback (most recent call last):
    File "<string>", line 1, in <module>
    File
  "/root/allmydata-tahoe-1.10.0/support/lib/python2.7/site-packages/pyOpenSSL-0.12-py2.7-linux-x86_64.egg/OpenSSL/__init__.py",
  line 41, in <module>
      from OpenSSL import rand, SSL
  ImportError:
  /root/allmydata-tahoe-1.10.0/support/lib/python2.7/site-packages/pyOpenSSL-0.12-py2.7-linux-x86_64.egg/OpenSSL/SSL.so:
  undefined symbol: SSLv2_method
  

• found a ​mailing list post saying:

  The latest version is 0.13. You can get it on PyPI here
  http://pypi.python.org/pypi/pyOpenSSL
  SSLv2 is no longer supported in OpenSSL, and version 0.13 no longer expects it.
  

We should update the dependency to pyOpenSSL >= 0.13. Note that I'm assuming that we no longer need to support platforms with very old versions of OpenSSL (see #1637).

[srl]

Also (if that isn't implied) please update the SUMO version to pyOpenSSL 0.13 also. Debian 7.1 system couldn't install from the SUMO package, until I realized that I could just install the OS pyOpenSSL which was 0.13.

[leif]

To clarify comment #1: running python setup.py build on Debian 7.1 works if the python-openssl package is already installed, but if you happened to run python setup.py build before python-openssl was installed you'll need to rm -r tahoe-lafs/support/lib/python2.7/site-packages/pyOpenSSL-0.12-* to be able to use Debian's version.

[daira]

Blocked on updating the pyOpenSSL eggs ​on tahoe-lafs.org.

[daira]

​https://tahoe-lafs.org/source/tahoe-lafs/deps/tahoe-lafs-dep-eggs/pyOpenSSL-0.13-py2.7-linux-x86_64.egg was built incorrectly and also had this problem; now that is fixed (but other copies of the egg might be broken).

[warner]

Two requirements for this one:

• update _auto_deps.py to pyOpenSSL >= 0.13
• make sure we publish eggs for 0.13

[daira]

Actually we should publish eggs for 0.13.1, which was the last version of pyOpenSSL before the switch to using cryptography and cffi. (We should make sure they are using the latest embedded OpenSSL to avoid recent OpenSSL security bugs.)

[Daira Hopwood <daira@…>]

In b0b76a7c5b89c3fed5a65ef6732dc45e578f12f4/trunk:

Improve comments in _auto_deps.py. refs #2249, #2028, #2193, #2005, #1258

Signed-off-by: Daira Hopwood <daira@…>

[daira]

Fixed by [18ffc29f4949b6098b8b89e6e89c89923121cda2/trunk].