Re: [gentoo-dev] Creating a USE_EXPAND for ssl providers

[Anthony G. Basile]

On 06/11/14 07:12, Chí-Thanh Christopher Nguyễn wrote:
> Dear all,
>
> I'm a bit late to the party, but here is my $0.02:
>
>> REQUIRED_USE="
>>      curl_ssl_winssl? ( elibc_Winnt )
>>      ssl? (
>>          ^^ (
>> [...]
>>          )
>>      )"
> I don't like this. If the user specifies several SSL providers in
> make.conf, it should mean that any of these is fine and the ebuild can
> choose an arbitrary one. The exactly-one-of operator would cause emerge
> to complain in this case and possibly force the user to have complex
> package.use setups.

That's a good point and not one that I wasn't aware of.  But how would 
we better design this?  The only thing I can thing of (suggested 
earlier) is an eclass with some intelligence.  I'm not sure of the most 
userfriendly way of doing this.

>
>> With the number of ssl providers growing, like libressl, and with
>> issues like bug #510974, I think its time we consider making this a
>> uniform way of dealing with ssl providers in gentoo.  We would proceed
>> something like this:
>>
>> 1. Introduce a new USE_EXPAND called SSL which mirrors CURL_SSL ---
>> becuase CURL_SSL is too provincial a name.
>>
>> 2. migrate curl and all its dependencies to the SSL use expand.
>>
>> 3. Migrate over all consumers of ssl to the new SSL use expand system.
>>
>> What do  people think?
> I think a better name for the USE_EXPAND would be CRYPTO_PROVIDER (or
> similar) instead of just SSL, as the libraries are not strictly used for
> SSL but also for other forms of crypto (e.g. [1]).

Agreed.

>
>
> Best regards,
> Chí-Thanh Christopher Nguyễn
>
>
> [1] https://bugs.gentoo.org/show_bug.cgi?id=512664
>


-- 
Anthony G. Basile, Ph.D.
Gentoo Linux Developer [Hardened]
E-Mail    : blueness@g.o
GnuPG FP  : 1FED FAD9 D82C 52A5 3BAB  DC79 9384 FA6E F52D 4BBA
GnuPG ID  : F52D4BBA