[opensuse-factory] Move to OpenSSL 1.1

Hi, We plan to switch Factory to OpenSSL 1.1.0. OpenSSL 1.1 is a new version which brings a lot of new functionality such as support for ChaCha20 and Poly1305 and the TLS 1.3 protocol. This new branch is however incompatible with the 1.0.x series, For more details, see https://wiki.openssl.org/index.php/OpenSSL_1.1.0_Changes There's a staging project built against OpenSSL 1.1: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:SSL11 There's currently about 30 build failures. Bugs were opened against all the failing packages, see the tracker bug: https://bugzilla.suse.com/show_bug.cgi?id=1042629 Some of the packages were already fixed upstream, some have pending patches and some require writing such a compatibility code. Please help us reducing the list if you can. Your help is highly appreciated. Thanks, Vita -- Vítězslav Čížek Emergency Update Team (EMU) "Whilst you sleep, we're probably saving the universe." -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Hi, On Thu, Aug 24, 2017 at 1:49 PM, Vitezslav Cizek <vcizek@suse.com> wrote:
Out of curiosity, will this impact Steam? Historically it has been quite fragile in face of openssl changes. Thanks, Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

El 24-08-2017 a las 8:49, Vitezslav Cizek escribió:
Bugs were opened against all the failing packages, see the tracker bug: https://bugzilla.suse.com/show_bug.cgi?id=1042629
Some of this reports suggest linking some packages with openssl 1.0.2x instead of fixing the code.. that is fine.. for as long it is a leaf package and/or you do not end with both openssl 1.0 and 1.1 libraries loaded in the same process. bad things will probably happen in that scenario. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Hi, On Thu, Aug 24, 2017 at 1:49 PM, Vitezslav Cizek <vcizek@suse.com> wrote:
Out of curiosity, will this impact Steam? Historically it has been quite fragile in face of openssl changes. Thanks, Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

El 24-08-2017 a las 8:49, Vitezslav Cizek escribió:
Bugs were opened against all the failing packages, see the tracker bug: https://bugzilla.suse.com/show_bug.cgi?id=1042629
Some of this reports suggest linking some packages with openssl 1.0.2x instead of fixing the code.. that is fine.. for as long it is a leaf package and/or you do not end with both openssl 1.0 and 1.1 libraries loaded in the same process. bad things will probably happen in that scenario. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (5)
-
Cristian Rodríguez
-
Dominique Leuenberger / DimStar
-
Robert Munteanu
-
Tomas Chvatal
-
Vitezslav Cizek