libhiredis0.14, httpd, libcjose0 libapache2-mod-auth-openidc about hiredis HOT 5 CLOSED

I'm not sure I fully understand the question. There are several hiredis releases since v0.14 available on pretty much all package repositories.

That said, if you have a specific httpd extension or mod that can only talk with hiredis v0.14 then the only real solution would be to update the extension to use the newer version of hiredis.

Looks like the offending package islibapache2-mod-auth-openidc?

❯ apt-cache show libapache2-mod-auth-openidc|grep Depends
Depends: libapr1 (>= 1.2.7), libaprutil1 (>= 1.4.0), libc6 (>= 2.14), libcjose0 (>= 0.4.1), libcurl4 (>= 7.16.2), libhiredis0.14 (>= 0.14.0), libjansson4 (>= 2.0.1), libpcre3, libssl3 (>= 3.0.0~~alpha1), apache2-api-20120211, apache2-bin (>= 2.4.16)

When I install that, it seems to specifically want hiredis v0.14.0. This would have to be rectified in that package.

from hiredis.

@michael-grunder Hi Michael, Thank you for your message!

Below is what we get too:

❯ apt-cache show libapache2-mod-auth-openidc|grep Depends
Depends: libapr1 (>= 1.2.7), libaprutil1 (>= 1.4.0), libc6 (>= 2.14), libcjose0 (>= 0.4.1), libcurl4 (>= 7.16.2), libhiredis0.14 (>= 0.14.0), libjansson4 (>= 2.0.1), libpcre3, libssl3 (>= 3.0.0~~alpha1), apache2-api-20120211, apache2-bin (>= 2.4.16)

It specifically wants hiredis v0.14.0.

Are you suggesting to upgrade library - libapache2-mod-auth-openidc ? We tried to use different version of httpd other than httpd:2.4.56-debian-ff. But It doesn't work.

apt install -y libcjose0 libapache2-mod-auth-openidc

I thought the above is to pull the latest version of libapache2-mod-auth-openidc... So should submit a question to libapache2-mod-auth-openidc and ask them?

Thanks,
Fong

from hiredis.

I thought the above is to pull the latest version of libapache2-mod-auth-openidc... So should submit a question to libapache2-mod-auth-openidc and ask them?

Unfortunately I don't really know anything about httpd mods or packages.  When I install the openidc mod on a fresh debian container, it installs hiredis v0.14.0 on its own, so theoretically that should work just fine.

I'd need more information about what error message you're seeing in terms of app startup. There are quite a few tricky edge cases around this stuff.

from hiredis.

@michael-grunder Hi Michael, Thanks for your reply!

When we use the following combination in our Docker image below. Our app starts as normal.

FROM /library/httpd:2.4.56-debian-ff

RUN apt-get update -y && \
    apt install -y libcjose0 libapache2-mod-auth-openidc libhiredis0.14 && \
    apt clean
RUN cp /usr/lib/apache2/modules/mod_auth_openidc.so /usr/local/apache2/modules/

However, httpd:2.4.56-debian-ff has a vulnerability. The fix version is 2.4.57-debian-ff. But if I use 2.4.57-debian-ff as our httpd base docker image, our app will not start even though the installed without any error. So we had to go back to version httpd:2.4.56-debian-ff in order to make our app work again.

Any suggestions?

Thanks,
Fong

from hiredis.

Going to close this one as it's more an issue with an app that uses hiredis.

from hiredis.