Gentoo Archives: gentoo-dev

From: "Michał Górny" <mgorny@g.o>
To: gentoo-dev@l.g.o, Peter Stuge <peter@×××××.se>
Subject: Re: [gentoo-dev] [RFC] Discontinuing LibreSSL support?
Date: Tue, 29 Dec 2020 13:08:35
Message-Id: 948e6d9c55b11ea2074fcdd125d4990b4b99a394.camel@gentoo.org
In Reply to: Re: [gentoo-dev] [RFC] Discontinuing LibreSSL support? by Jaco Kroon
1 On Tue, 2020-12-29 at 14:39 +0200, Jaco Kroon wrote:
2 > 2.  Install them into different prefixes (eg /usr/lib/openssl +
3 > /usr/lib/libressl and have the linker link to a specific version,
4 > /usr/include/{openssl,libressl} too).
5
6 For the record, this is something I've been wondering about for a long
7 time. However, there are two problems with that: a small one
8 and a huge one.
9
10 The small problem is that this requires a lot of additional downstream
11 work. I mean, you have to explicitly support the choice in ebuilds,
12 and this means making things even harder for newcomers.
13
14 The big problem is that (unless I'm mistaken) we won't be able to load
15 LibreSSL and OpenSSL to the same executable. So we'd actually have to
16 enforce that the whole link chain links to the same SSL provider,
17 and effectively land pretty close to where we are now.
18
19 --
20 Best regards,
21 Michał Górny

Replies

Subject Author
Re: [gentoo-dev] [RFC] Discontinuing LibreSSL support? Peter Stuge <peter@×××××.se>