Gentoo Archives: gentoo-dev

From: m1027 <m1027@××××××.net>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] [RFC] Discontinuing LibreSSL support?
Date: Wed, 30 Dec 2020 10:42:02
Message-Id: X+xZcpbzaZukKcPv@host
In Reply to: Re: [gentoo-dev] [RFC] Discontinuing LibreSSL support? by "Michał Górny"
1 mgorny:
2
3 > On Tue, 2020-12-29 at 16:12 +0100, Toralf Förster wrote:
4 > > On 12/29/20 2:57 PM, m1027 wrote:
5 > > > - removing libressl, installing openssl, maybe wget then, followed
6 > > >    by the rest?
7 > > remove is sufficient b/c emerge then immediately advices a
8 > > @preserved-rebuild - at least that's the way it works here at the
9 > > tinderbox (in the opposite direction FWIW)
10 > >
11 >
12 > I'm not sure if you meant it but it reads as if you were talking about
13 > removing the package. This is incorrect.
14 >
15 > You need to disable the USE flag and then --changed-use (or --newuse)
16 > rebuild everything with the flag. If the depgraph is clean, emerge
17 > should happily trigger the rebuild along with automatic replacement of
18 > dev-libs/libressl with dev-libs/openssl.
19 >
20 > However, it's a good idea to run the same command with --fetchonly
21 > first, to make sure that all distfiles are in place, in case wget got
22 > broken in the process.
23
24 It might not be the place to discuss emerge dependency details here,
25 take it as some initial feedback on the transition from libressl to
26 openssl.
27
28 The general way to go seems indeed:
29
30 - remove libressl from USE flags, also adjusting curl_ssl
31 - initial emerge ... --fetchonly: to my surprise not always required
32 - emerge -autDUN @world
33 - finally the usual @preserved-rebuild
34 - On some systems another @world update revealed again a lot
35 - This also worked over ssh
36
37 The systems I tried so far
38
39 - 2x Gnome desktop systems, close to the USE defaults, went smoothly
40 - 1x Raspberry Pi over ssh: still working, ;-) okay so far
41 - 1x Developer system with some smaller issues
42
43 The issues I had:
44
45 - hostapd: when with +internal-tls, some build issue with
46 libtommath; when with -internal-tls it required openssl -bindist;
47 I did not investigate, just uninstalled hostapd yet
48
49 - openssl+bind+openssh: conflict triggered to do +/-bindist for
50 openssl; solution was -bindist everywhere (see other posts on
51 bindist already)
52
53 - old android-tools-6.0.1_p79: build issue mentioning ssl; not
54 ivestigated further, just uninstalled
55
56 Thanks

Replies

Subject Author
Re: [gentoo-dev] [RFC] Discontinuing LibreSSL support? "Michał Górny" <mgorny@g.o>