{"action":"created","issue":{"url":"https://api.github.com/repos/ContinuumIO/anaconda-issues/issues/10283","repository_url":"https://api.github.com/repos/ContinuumIO/anaconda-issues","labels_url":"https://api.github.com/repos/ContinuumIO/anaconda-issues/issues/10283/labels{/name}","comments_url":"https://api.github.com/repos/ContinuumIO/anaconda-issues/issues/10283/comments","events_url":"https://api.github.com/repos/ContinuumIO/anaconda-issues/issues/10283/events","html_url":"https://github.com/ContinuumIO/anaconda-issues/issues/10283","id":376025907,"node_id":"MDU6SXNzdWUzNzYwMjU5MDc=","number":10283,"title":"anaconda defaults openssl 1.1.1 upgrade is causing inconsistent py2 environments","user":{"login":"s22chan","id":32464643,"node_id":"MDQ6VXNlcjMyNDY0NjQz","avatar_url":"https://avatars3.githubusercontent.com/u/32464643?v=4","gravatar_id":"","url":"https://api.github.com/users/s22chan","html_url":"https://github.com/s22chan","followers_url":"https://api.github.com/users/s22chan/followers","following_url":"https://api.github.com/users/s22chan/following{/other_user}","gists_url":"https://api.github.com/users/s22chan/gists{/gist_id}","starred_url":"https://api.github.com/users/s22chan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/s22chan/subscriptions","organizations_url":"https://api.github.com/users/s22chan/orgs","repos_url":"https://api.github.com/users/s22chan/repos","events_url":"https://api.github.com/users/s22chan/events{/privacy}","received_events_url":"https://api.github.com/users/s22chan/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-10-31T15:37:52Z","updated_at":"2018-10-31T17:03:59Z","closed_at":null,"author_association":"NONE","body":"### Actual Behavior\r\n\r\nA new python runtime built with openssl 1.1.1 is installed in most cases, but dependent packages (mainly cryptography, urllib3) haven't been rebuilt and older packages haven't been pinned to a compatible openssl. Also linkage is not correctly set to symlinks and linked directly to versioned sharedlibs. End result is most packages that access openssl fail:\r\n\r\n```python\r\n>>> import requests\r\nTraceback (most recent call last):\r\n  File \"<stdin>\", line 1, in <module>\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/requests/__init__.py\", line 52, in <module>\r\n    from .packages.urllib3.contrib import pyopenssl\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/requests/packages/urllib3/contrib/pyopenssl.py\", line 46, in <module>\r\n    import OpenSSL.SSL\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/OpenSSL/__init__.py\", line 8, in <module>\r\n    from OpenSSL import rand, crypto, SSL\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/OpenSSL/rand.py\", line 11, in <module>\r\n    from OpenSSL._util import (\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/OpenSSL/_util.py\", line 7, in <module>\r\n    binding = Binding()\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/cryptography/hazmat/bindings/openssl/binding.py\", line 89, in __init__\r\n    self._ensure_ffi_initialized()\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/cryptography/hazmat/bindings/openssl/binding.py\", line 109, in _ensure_ffi_initialized\r\n    libraries=libraries,\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/cryptography/hazmat/bindings/utils.py\", line 80, in build_ffi\r\n    extra_link_args=extra_link_args,\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/cffi/api.py\", line 451, in verify\r\n    lib = self.verifier.load_library()\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/cffi/verifier.py\", line 105, in load_library\r\n    return self._load_library()\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/cffi/verifier.py\", line 216, in _load_library\r\n    return self._vengine.load_library()\r\n  File \"/miniconda3/envs/protobuf/lib/python2.7/site-packages/cffi/vengine_cpy.py\", line 159, in load_library\r\n    raise VerificationError(error)\r\ncffi.error.VerificationError: importing '/miniconda3/envs/protobuf/lib/python2.7/site-packages/cryptography/_Cryptography_cffi_4ed9e37dx4000d087.so': dlopen(/miniconda3/envs/protobuf/lib/python2.7/site-packages/cryptography/_Cryptography_cffi_4ed9e37dx4000d087.so, 2): Library not loaded: @loader_path/../../../libcrypto.1.0.0.dylib\r\n  Referenced from: /miniconda3/envs/protobuf/lib/python2.7/site-packages/cryptography/_Cryptography_cffi_4ed9e37dx4000d087.so\r\n  Reason: image not found\r\n```\r\n\r\n### Expected Behavior\r\n\r\neither environments resolve correctly consistently to an older version of openssl, or new packages are built with openssl.\r\n\r\n### Steps to Reproduce\r\n\r\non macos\r\n```sh\r\nconda create -n test python=2 conda-build\r\nconda activate test\r\npython -c 'import requests'\r\n```\r\non ubuntu\r\n```sh\r\nconda create -n test python=2 conda=4.5.2 openssl=1.1.1\r\nconda activate test\r\npython -c 'import requests'\r\n```\r\n\r\n##### Anaconda or Miniconda version: \r\nMiniconda 4.5.11\r\n\r\n##### Operating System:\r\nMac/Ubuntu\r\n\r\n##### `conda info`\r\n```\r\n     active environment : test\r\n    active env location : /miniconda3/envs/test\r\n            shell level : 1\r\n       user config file : /.condarc\r\n populated config files : /.condarc\r\n          conda version : 4.5.11\r\n    conda-build version : 3.16.1\r\n         python version : 3.7.0.final.0\r\n       base environment : /miniconda3  (writable)\r\n           channel URLs : https://repo.anaconda.com/pkgs/main/osx-64\r\n                          https://repo.anaconda.com/pkgs/main/noarch\r\n                          https://repo.anaconda.com/pkgs/free/osx-64\r\n                          https://repo.anaconda.com/pkgs/free/noarch\r\n                          https://repo.anaconda.com/pkgs/r/osx-64\r\n                          https://repo.anaconda.com/pkgs/r/noarch\r\n                          https://repo.anaconda.com/pkgs/pro/osx-64\r\n                          https://repo.anaconda.com/pkgs/pro/noarch\r\n          package cache : /miniconda3/pkgs\r\n                          /.conda/pkgs\r\n       envs directories : /miniconda3/envs\r\n                          /.conda/envs\r\n               platform : osx-64\r\n             user-agent : conda/4.5.11 requests/2.19.1 CPython/3.7.0 Darwin/18.0.0 OSX/10.14\r\n                UID:GID : 501:20\r\n             netrc file : None\r\n           offline mode : False\r\n\r\n# conda environments:\r\n#\r\nbase                     /miniconda3\r\ntest                  *  /miniconda3/envs/test\r\n\r\nsys.version: 3.7.0 (default, Jun 28 2018, 07:39:16)\r\n...\r\nsys.prefix: /miniconda3\r\nsys.executable: /miniconda3/bin/python\r\nconda location: /miniconda3/lib/python3.7/site-packages/conda\r\nconda-build: /miniconda3/bin/conda-build\r\nconda-convert: /miniconda3/bin/conda-convert\r\nconda-develop: /miniconda3/bin/conda-develop\r\nconda-env: /miniconda3/bin/conda-env\r\nconda-index: /miniconda3/bin/conda-index\r\nconda-inspect: /miniconda3/bin/conda-inspect\r\nconda-metapackage: /miniconda3/bin/conda-metapackage\r\nconda-render: /miniconda3/bin/conda-render\r\nconda-server: /miniconda3/bin/conda-server\r\nconda-skeleton: /miniconda3/bin/conda-skeleton\r\nuser site dirs: ~/.local/lib/python2.7\r\n\r\nCIO_TEST: <not set>\r\nCONDA_DEFAULT_ENV: test\r\nCONDA_EXE: /miniconda3/bin/conda\r\nCONDA_PREFIX: /miniconda3/envs/test\r\nCONDA_PROMPT_MODIFIER:\r\nCONDA_PYTHON_EXE: /miniconda3/bin/python\r\nCONDA_ROOT: /miniconda3\r\nCONDA_SHLVL: 1\r\nINFOPATH: /usr/local/share/info:\r\nMANPATH: /usr/local/share/man:\r\nPATH: /miniconda3/envs/test/bin:/usr/local/bin:/usr/local/bin:/usr/local/sbin:/usr/local/bin:/usr/local/sbin:/usr/bin:/bin:/usr/sbin:/sbin\r\nREQUESTS_CA_BUNDLE: <not set>\r\nSSL_CERT_FILE: <not set>\r\n```\r\n\r\n##### `conda list --show-channel-urls`\r\n```\r\n# packages in environment at /miniconda3/envs/test:\r\n#\r\n# Name                    Version                   Build  Channel\r\nbeautifulsoup4            4.6.3                    py27_0    defaults\r\nbzip2                     1.0.6                h1de35cc_5    defaults\r\nca-certificates           2018.03.07                    0    defaults\r\ncertifi                   2018.10.15               py27_0    defaults\r\ncffi                      1.11.5           py27h6174b99_1    defaults\r\nchardet                   3.0.4                    py27_1    defaults\r\nconda                     4.5.2                    py27_0    defaults\r\nconda-build               3.16.2                   py27_0    defaults\r\nconda-env                 2.6.0                         1    defaults\r\ncontextlib2               0.5.5            py27h9cb85f4_0    defaults\r\ncryptography              0.5.4                    py27_0    defaults\r\nenum34                    1.1.6                    py27_1    defaults\r\nfilelock                  3.0.9                    py27_0    defaults\r\nfutures                   3.2.0                    py27_0    defaults\r\nglob2                     0.6                      py27_1    defaults\r\nicu                       58.2                 h4b95b61_1    defaults\r\njinja2                    2.10                     py27_0    defaults\r\nlibarchive                3.3.3                he8b1da1_2    defaults\r\nlibcxx                    4.0.1                hcfea43d_1    defaults\r\nlibcxxabi                 4.0.1                hcfea43d_1    defaults\r\nlibedit                   3.1.20170329         hb402a30_2    defaults\r\nlibffi                    3.2.1                h475c297_4    defaults\r\nlibiconv                  1.15                 hdd342a3_7    defaults\r\nlibxml2                   2.9.8                hab757c2_1    defaults\r\nlz4-c                     1.8.1.2              h1de35cc_0    defaults\r\nlzo                       2.10                 h362108e_2    defaults\r\nmarkupsafe                1.0              py27h1de35cc_1    defaults\r\nncurses                   6.1                  h0a44026_0    defaults\r\nopenssl                   1.1.1                h1de35cc_0    defaults\r\npip                       10.0.1                   py27_0    defaults\r\npkginfo                   1.4.2                    py27_1    defaults\r\npsutil                    5.4.7            py27h1de35cc_0    defaults\r\npycosat                   0.6.3            py27h1de35cc_0    defaults\r\npycparser                 2.19                     py27_0    defaults\r\npyopenssl                 0.15.1                   py27_2    defaults\r\npython                    2.7.15               h8f8e585_2    defaults\r\npython-libarchive-c       2.8                      py27_6    defaults\r\npytz                      2018.5                   py27_0    defaults\r\npyyaml                    3.13             py27h1de35cc_0    defaults\r\nreadline                  7.0                  h1de35cc_5    defaults\r\nrequests                  2.14.2                   py27_0    defaults\r\nruamel_yaml               0.15.46          py27h1de35cc_0    defaults\r\nscandir                   1.9.0            py27h1de35cc_0    defaults\r\nsetuptools                40.4.3                   py27_0    defaults\r\nsix                       1.11.0                   py27_1    defaults\r\nsqlite                    3.25.2               ha441bb4_0    defaults\r\ntk                        8.6.8                ha441bb4_0    defaults\r\ntqdm                      4.26.0           py27h28b3542_0    defaults\r\nwheel                     0.32.2                   py27_0    defaults\r\nxz                        5.2.4                h1de35cc_4    defaults\r\nyaml                      0.1.7                hc338f04_2    defaults\r\nzlib                      1.2.11               hf3cbc9b_2    defaults\r\nzstd                      1.3.3                h2a6be3a_0    defaults\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/ContinuumIO/anaconda-issues/issues/comments/434768251","html_url":"https://github.com/ContinuumIO/anaconda-issues/issues/10283#issuecomment-434768251","issue_url":"https://api.github.com/repos/ContinuumIO/anaconda-issues/issues/10283","id":434768251,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNDc2ODI1MQ==","user":{"login":"mingwandroid","id":1042804,"node_id":"MDQ6VXNlcjEwNDI4MDQ=","avatar_url":"https://avatars1.githubusercontent.com/u/1042804?v=4","gravatar_id":"","url":"https://api.github.com/users/mingwandroid","html_url":"https://github.com/mingwandroid","followers_url":"https://api.github.com/users/mingwandroid/followers","following_url":"https://api.github.com/users/mingwandroid/following{/other_user}","gists_url":"https://api.github.com/users/mingwandroid/gists{/gist_id}","starred_url":"https://api.github.com/users/mingwandroid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mingwandroid/subscriptions","organizations_url":"https://api.github.com/users/mingwandroid/orgs","repos_url":"https://api.github.com/users/mingwandroid/repos","events_url":"https://api.github.com/users/mingwandroid/events{/privacy}","received_events_url":"https://api.github.com/users/mingwandroid/received_events","type":"User","site_admin":false},"created_at":"2018-10-31T17:03:59Z","updated_at":"2018-10-31T17:03:59Z","author_association":"MEMBER","body":"The issue here is unpinned packages in the legacy `free` channel. We'll look into that."}}
{"actor":{"display_login":"mingwandroid"}}