[Buildroot] [PATCH 1/1] package/python3: drop libressl support

Peter Korsgaard peter at korsgaard.com
Wed Apr 27 20:09:17 UTC 2022


>>>>> "Arnout" == Arnout Vandecappelle <arnout at mind.be> writes:

Hi,

 >>> I don't have a very well-informed opinion, but perhaps we should think
 >>> about this?
 >> Yeah, not really sure, it may be useful to keep around, I think it
 >> has an
 >> alternative updated API to openssl's updated API that may be desirable
 >> for some use cases, although probably not the most commonly used.

 >  At that point, however, having libressl as a virtual package
 >  alternative for openssl becomes less and less realistic. Virtual
 > packages should only be used if the alternatives can be considered
 > drop-in replacements with compatible API. A few exceptions are
 > acceptable, but it's becoming too much.

 >  We should also start thinking what to do with openssl 3. It has an
 >  API that is somewhat compatible with openssl 1.1.1, but there are
 > almost no packages that can use it without any changes. This could
 > actually be an opportunity to get aout of this mess: most packages
 > that are not compatible with libressl are probably already compatible
 > with openssl 3. So if we introduce an openssl3 package, we can migrate
 > the packages that don't like libressl to that, and leave the choice
 > between openssl 1.1.1 and libressl for legacy and BSD packages.

That indeed sounds like a way forward. Do we expect most applications to
(already have) move to the v3.x API or do we rather expect to have to
keep around openssl 1.1.1 / libressl for a long time?

-- 
Bye, Peter Korsgaard



More information about the buildroot mailing list