[opensuse-factory] Move to OpenSSL 1.1
Hi, We plan to switch Factory to OpenSSL 1.1.0. OpenSSL 1.1 is a new version which brings a lot of new functionality such as support for ChaCha20 and Poly1305 and the TLS 1.3 protocol. This new branch is however incompatible with the 1.0.x series, For more details, see https://wiki.openssl.org/index.php/OpenSSL_1.1.0_Changes There's a staging project built against OpenSSL 1.1: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:SSL11 There's currently about 30 build failures. Bugs were opened against all the failing packages, see the tracker bug: https://bugzilla.suse.com/show_bug.cgi?id=1042629 Some of the packages were already fixed upstream, some have pending patches and some require writing such a compatibility code. Please help us reducing the list if you can. Your help is highly appreciated. Thanks, Vita -- Vítězslav Čížek Emergency Update Team (EMU) "Whilst you sleep, we're probably saving the universe." -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Hi, On Thu, Aug 24, 2017 at 1:49 PM, Vitezslav Cizek <vcizek@suse.com> wrote:
Hi, We plan to switch Factory to OpenSSL 1.1.0. OpenSSL 1.1 is a new version which brings a lot of new functionality such as support for ChaCha20 and Poly1305 and the TLS 1.3 protocol.
This new branch is however incompatible with the 1.0.x series, For more details, see https://wiki.openssl.org/index.php/OpenSSL_1.1.0_Changes
Out of curiosity, will this impact Steam? Historically it has been quite fragile in face of openssl changes. Thanks, Robert -- http://robert.muntea.nu/ -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
Robert Munteanu píše v Čt 24. 08. 2017 v 13:57 +0200:
Hi,
On Thu, Aug 24, 2017 at 1:49 PM, Vitezslav Cizek <vcizek@suse.com> wrote:
Hi, We plan to switch Factory to OpenSSL 1.1.0. OpenSSL 1.1 is a new version which brings a lot of new functionality such as support for ChaCha20 and Poly1305 and the TLS 1.3 protocol.
This new branch is however incompatible with the 1.0.x series, For more details, see https://wiki.openssl.org/index.php/OpenSSL_1. 1.0_Changes
Out of curiosity, will this impact Steam? Historically it has been quite fragile in face of openssl changes.
For now we will have to keep the libopenssl-1_0_0-steam or how did i call it. Long run, we will see. It will be fun question when 1.0 is completely out of support. Tom
On Thu, 2017-08-24 at 13:49 +0200, Vitezslav Cizek wrote:
Hi, We plan to switch Factory to OpenSSL 1.1.0. OpenSSL 1.1 is a new version which brings a lot of new functionality such as support for ChaCha20 and Poly1305 and the TLS 1.3 protocol.
This new branch is however incompatible with the 1.0.x series, For more details, see https://wiki.openssl.org/index.php/OpenSSL_1.1. 0_Changes
There's a staging project built against OpenSSL 1.1: https://build.opensuse.org/project/show/openSUSE:Factory:Staging:SSL1 1 There's currently about 30 build failures.
Keep in mind that this is the initial variant based on ring1 and ring2 packages only; there is a high chance that many more in openSUSE:Factory will fail, once we link them into the Staging too. Cheers, Dominique
El 24-08-2017 a las 8:49, Vitezslav Cizek escribió:
Bugs were opened against all the failing packages, see the tracker bug: https://bugzilla.suse.com/show_bug.cgi?id=1042629
Some of this reports suggest linking some packages with openssl 1.0.2x instead of fixing the code.. that is fine.. for as long it is a leaf package and/or you do not end with both openssl 1.0 and 1.1 libraries loaded in the same process. bad things will probably happen in that scenario. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org
participants (5)
-
Cristian Rodríguez -
Dominique Leuenberger / DimStar -
Robert Munteanu -
Tomas Chvatal -
Vitezslav Cizek