Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

TASK: Drop all openssl-devel-engine dependencies #202

Open
5 of 11 tasks
yselkowitz opened this issue Sep 27, 2024 · 10 comments
Open
5 of 11 tasks

TASK: Drop all openssl-devel-engine dependencies #202

yselkowitz opened this issue Sep 27, 2024 · 10 comments
Assignees
@tdawson @yselkowitz
Labels
cleanup Removal of deprecated or unwanted packages help wanted Extra attention is needed

Comments

@yselkowitz
Copy link
Member

yselkowitz commented Sep 27, 2024 •
edited
Loading

What does the ELN SIG need to do?

  • In RHEL 10, the OpenSSL ENGINE API is deprecated, the <openssl/engine.h> header is not provided, and OPENSSL_NO_ENGINE is defined by default.
  • In Fedora 41, the ENGINE API is deprecated, the header is shipped in a separate subpackage, and (currently) as of Fedora 42, OPENSSL_NO_ENGINE is defined if engine.h is absent. (The latter is on its way to F41 as well.)
  • ELN is currently following Fedora rather than RHEL in this matter.
  • The following packages BuildRequires: openssl-devel-engine in ELN. Some of these may not need that when OPENSSL_NO_ENGINE is defined, but others may still need patches to build or work without ENGINE.
  • Once nothing depends on ENGINE anymore, the -devel-engine subpackage should be disabled in ELN.

https://tiny.distro.builders/view-rpm--view-eln--openssl-devel-engine.html

  • asio
  • ceph
  • curl
  • freeradius
  • openssl-pkcs11 (UNWANTED)
  • python-awscrt
  • qatengine (convert to provider)
  • rsyslog
  • systemd
  • tpm2-tss
  • xmlsec1

(TODO: check ELN Extras build dependencies)
@yselkowitz
Copy link
Member Author

https://src.fedoraproject.org/rpms/qatengine/pull-request/4

@yselkowitz yselkowitz added help wanted Extra attention is needed cleanup Removal of deprecated or unwanted packages labels Oct 22, 2024
@yselkowitz yselkowitz mentioned this issue Nov 5, 2024
Closed
59 tasks
@yselkowitz
Copy link
Member Author

https://src.fedoraproject.org/rpms/asio/pull-request/7

@yselkowitz
Copy link
Member Author

https://src.fedoraproject.org/rpms/curl/pull-request/37

@yselkowitz
Copy link
Member Author

https://src.fedoraproject.org/rpms/freeradius/pull-request/6

@yselkowitz
Copy link
Member Author

https://src.fedoraproject.org/rpms/python-awscrt/pull-request/207

@yselkowitz
Copy link
Member Author

https://src.fedoraproject.org/rpms/systemd/pull-request/169

@yselkowitz
Copy link
Member Author

tpm2-tss is fixed in upstream master by tpm2-software/tpm2-tss#2823 but there has yet to be a (4.2?) release from that branch; Fedora is on the latest stable 4.1 branch.

@yselkowitz
Copy link
Member Author

https://src.fedoraproject.org/rpms/xmlsec1/pull-request/6

@yselkowitz
Copy link
Member Author

rsyslog upstream discussion: rsyslog/rsyslog#5429

@yselkowitz
Copy link
Member Author

https://src.fedoraproject.org/rpms/ceph/pull-request/17

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@tdawson tdawson

@yselkowitz yselkowitz

Labels
cleanup Removal of deprecated or unwanted packages help wanted Extra attention is needed
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@tdawson @yselkowitz