git functions with OpenSSL 3.x

[FK21]

Hello Everyone,

does anyone use the "git functions" integrated into SAS? I came across the following issue: the underlying OpenSSL version used for the functions to "work" is "OpenSSL 1.1.1".  However, this is an old version, which is not maintained anymore! (see: Wikipedia page to OpenSSL )

"Newer" Operating Systems, e.g. Red Hat 9.x by default make use of the 3.x.x. versions of OpenSSL,

The 3.x.x. versions, however, do not work with the SAS git functions.

Example:

Running this data setp:

I get the following error messages:

NOTE: libgit2.so not found in the system location, trying the extension path.
NOTE: libgit2.so not found in the system location, trying the install path.
ERROR: libgit2.so not found.
ERROR: Unable to load libgit2 module.
rc_git_version=-1
NOTE: DATA statement used (Total process time):
real time 0.00 seconds
cpu time 0.00 seconds

When looking for a solution, the only "solution" that presented to me, was to install an "deterioreated" verison of OpenSSL:

https://support.sas.com/kb/69/920.html

Isn't there a more proper solution which makes git functions work under OpenSSL 3.x.x.?

Cheers,

FK

[andreas_lds]

From the problem note: "SAS 9.4M7 or SAS9.4M8: Install the hot fix, install OpenSSL 1.0.x ..."

I would not even dare to suggest this to our it security. I thought that SAS learned something from the log4j fiasco. Having outdate libraries is an absolute no-go in any environment.

[ChrisHemedinger · Accepted solution]

The available SAS hotfixes provide updated libgit* modules that work with OpenSSL 1.1.1. OpenSSL 1.1.1 is still supported and in service; it is maintained by Red Hat (with its most recent minor release in Sept 2023).

SAS is beginning some projects to provide versions of libgit* that work with OpenSSL 3. These are not available yet, but if it's something you need you can register a case with SAS Technical Support and maybe this can influence the priority.

[FK21]

@ChrisHemedinger : 

Thank you, Chris, for your reply. I already opened a Case with Tech Support. Basically, they told me the same thing as you did: it is work in progress.

Let's hope, they can come up with the new versions of libgit* as soon as possible.

I'll keep you posted!

Thank's,

FK21