From: Michael <aixtools@felt.demon.nl>
Date: Sun, 29 Jul 2018 19:48:43 GMT
Subject: Re: git broken for AIX somewhere between 2.13.2 and 2.13.3
Message-ID: <dfe374bf-d9de-8dad-6ec9-4edfa3e9b12b@felt.demon.nl>
In-Reply-To: <20180729192753.GD945730@genre.crustytoothpaste.net>

On 29/07/2018 21:27, brian m. carlson wrote:
> On Sun, Jul 29, 2018 at 08:59:39PM +0200, Michael wrote:
>> On 29/07/2018 20:10, brian m. carlson wrote:
>>> Are you using SHA1DC on that system, and does compiling with another
>>> SHA-1 implementation help?  There was a change to the SHA1DC code big
>>> endian detection in that commit, which might be the cause of your
>>> problems if you're using a POWER or PowerPC system.
>> I was thinking it might be an 'endian' issue. So, yes - AIX runs on POWER,
>> only as BigEndian.
> Well, that explains it.  I would recommend submitting a patch to
> https://github.com/cr-marcstevens/sha1collisiondetection, and the we can
> pull in the updated submodule with that fix.
Not sure I am smart enough to do that. I'll have to download, build, and 
see what it says.
>
> In the mean time, you could build using OpenSSL or the block SHA-1
> implementation, and switch back once things are in a good state.  I do
> recommend using SHA1DC for things long term, though, as attacks on SHA-1
> are only going to get better.
Any suggestions on where/how to do this?

root@x066:[/data/prj/aixtools/git/git-2.13.2]./configure --help | grep 
-i sha
   --sharedstatedir=DIR    modifiable architecture-independent data 
[PREFIX/com]
   --datarootdir=DIR       read-only arch.-independent data root 
[PREFIX/share]

root@x066:[/data/prj/aixtools/git/git-2.13.2]./configure --help | grep ssl
   --with-openssl          use OpenSSL library (default is YES)
                           ARG can be prefix for openssl library and 
headers