Gentoo Archives: gentoo-dev

From: Ryan Hill <rhill@g.o>
To: gentoo-dev@l.g.o
Subject: [gentoo-dev] Re: ssl vs openssl vs libressl vs gnutls USE flag foo
Date: Wed, 28 Oct 2015 06:20:27
Message-Id: 20151028002341.7f08704e@caribou.gateway.pace.com
In Reply to: Re: [gentoo-dev] ssl vs openssl vs libressl vs gnutls USE flag foo by Rich Freeman
1 On Tue, 27 Oct 2015 22:46:35 -0400
2 Rich Freeman <rich0@g.o> wrote:
3
4 > On Tue, Oct 27, 2015 at 10:06 PM, hasufell <hasufell@g.o> wrote:
5 > >
6 > > B) 1 feature flag, 3 strict provider flags
7 > > * ssl: enable any sort of SSL/TLS support
8 > > * gnutls: only to enable gnutls provided ssl support in case there
9 > > is a choice
10 > > * openssl: only to enable openssl provided ssl support in case
11 > > there is a choice (should not be implemented as !gnutls?)
12 > > * libressl: only to enable libressl provided ssl support in case there
13 > > is a choice, must conflict with 'openssl' USE flag
14 > >
15 > > consequences:
16 > > * REQUIRED_USE="^^ ( openssl libressl )" is not only allowed, it is
17 > > _mandatory_
18 > > * packages like media-video/ffmpeg _must_ switch the USE flag
19 > > openssl->ssl to avoid breaking global USE flags
20 > > * !gnutls? ( dev-libs/openssl:0 ) will be bad form or even disallowed
21 > >
22 > > B will definitely be more work, but ofc is also a lot cleaner and
23 > > totally unambigous.
24 > >
25 >
26 > ++
27 >
28 > The pain is for a short time. Then we have to live with this for a
29 > long time. USE flags should have one meaning. The fact that this
30 > isn't the case right now is already a bug. We don't need to
31 > perpetuate it.
32 >
33 > Honestly, this just seems like "the right thing" so if there isn't
34 > opposition then I'd suggest to "just do it" and commit fixes to
35 > ebuilds that need the fix (ie if maintainer doesn't respond to bug
36 > quickly just take care of it). If people object they should speak up
37 > now, and we can take it up at the next council meeting if necessary
38 > (which is right around the corner).
39
40 Agreed. If there's one choice then "ssl" should be used. openssl/libressl/etc
41 should really be considered sub-flags of ssl.
42
43 I really wish we had some way of specifying this to make things clearer to the
44 user, so they could see exactly how these flags interact with each other.
45 Something like (emerge -pv):
46
47 ssl [ (openssl) libressl gnutls ]
48 - if USE ssl then pick one of, default openssl if none chosen
49
50 ssl [[ (openssl) libressl gnutls ]]
51 - if USE ssl then one or more of... etc.
52
53 But I suppose that's another topic.
54
55
56 --
57 Ryan Hill psn: dirtyepic_sk
58 gcc-porting/toolchain/wxwidgets @ gentoo.org
59
60 47C3 6D62 4864 0E49 8E9E 7F92 ED38 BD49 957A 8463

Replies