On Wed, Aug 23, 2017 at 7:17 AM Richard Grainger
<grainger(a)gmail.com> wrote:
>
> OK, thanks,
>
> On Wed, Aug 23, 2017 at 12:13 PM, Anssi Johansson <epel(a)miuku.net> wrote:
>>
>> Anssi Johansson kirjoitti 23.8.2017 klo 13.31:
>>>
>>> Richard Grainger kirjoitti 23.8.2017 klo 11.55:
>>>>
>>>> yum install nodejs
>>>
>>>
>>> Try with this:
>>>
>>> yum install nodejs --enablerepo=epel-testing
>>>
>>> This will install nodejs with http-parser bundled in. http-parser was
>>> removed from EPEL because it is now in RHEL 7.4, and EPEL does not ship
>>> packages that are also in RHEL. http-parser will be in CentOS 7.4 once it is
>>> released.
>>
>>
>> I forgot to mention that this is only a temporary workaround. Once CentOS
>> 7.4 is released, nodejs will revert back to depending on http-parser from
>> RHEL/CentOS.
>
>
It turns out there's an additional issue; it appears that Node.js 6.11.2
with the bundled http-parser doesn't work properly with OpenSSL 1.0.1 on
EPEL 7. This would also be fixed by requiring RHEL/CentOS 7.4 (since it
upgraded to OpenSSL 1.0.2).
I'm trying to figure out what to do here. We can't just put back the
http-parser in EPEL unfortunately because the RHEL folks unintentionally
released a lower NVR for the official package. If we put ours back, it would
supersede RHEL and take them out of support on any package linking against
it (which now includes parts of SSSD).
We should really be bumping and pushing an errata if RHEL picked up
the EPEL package and pulled it into core RHEL anyway because if people
had been previously using it in EPEL for other reasons (and 100s of
enterprises do sync EPEL) they would already be in a situation where
they're running an unsupported version, there is no other fix to that
and Red Hat engineering needs to improve their processes in this
regard because there is a number of these issues each el7 cycle.
I'm going to spend a little time today trying to figure out if I
can fix the
OpenSSL 1.0.1 compatibility patch and push out an update that will work with
the bundled http-parser for now.
Can you not just rebuild nodejs, which will rebuild the bundled
http-parser, against the new 1.0.2 build in 7.4?