Cristian Rodríguez wrote:
El 18/04/11 04:31, Ludwig Nussel escribió:
Marcus Meissner wrote:
If all packages are in the queue... then I guess it is fine.
Hmm, what if a client still needs to talk SSLv2 with very old and rusty servers?
That would be broken and after 15 years very unlikely. However, I'm not sure dropping the symbol entirely is a good idea. It's breaking the ABI after all. Adding __attribute__ ((deprecated)) for a while would be safer.
Dropping the symbol is the upstream behaviour, and what other distributions have also adopted.
Debian did it only very recently in their unstable release. So it's no surprise applications are not prepared for it yet. I still think removing a symbol from a library that is supposed to be stable is a bad idea. We certainly should patch out SSLv2 from applications but removing the symbol without changing soname is evil. After all glibc still has gets() ... cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org