<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Hi,</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">two (belated) PRs are queued to amend OpenSSL 1.0 and add OpenSSL 1.1 to our repository:</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><a href="https://github.com/OpenIndiana/oi-userland/pull/6471">https://github.com/OpenIndiana/oi-userland/pull/6471</a></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><a href="https://github.com/OpenIndiana/oi-userland/pull/6472">https://github.com/OpenIndiana/oi-userland/pull/6472</a></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small">Both implementations live in their own prefix with mediated links in /lib and /usr/lib; pkg-config files are also mediated.<br></div><div><br></div><div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">The recipe is adapted from the solaris-userland efforts, thanks to them.<br></div><br></div><div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Tasks at hand:</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">1. Fix 3 small illumos-gate nits due to cypher deprecation.</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">2. Add macros to ease the switch between OpenSSL 1.0/1.1<br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">3. Move all the components supporting OpenSSL 1.1 or update them.</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">4. Deprecate possible rotting components which cannot be updated and may cause security issues.</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">A PR will contain 2 + 3 and we'll try to use the simple build_plan scheme to publish on the build server in one go.</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Priority is on the cryptographic Python modules used by pkg5 and security + server side software.<br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">When we feel confident that all is rebuilt and well we set OpenSSL 1.1 as the default mediator version.</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Any ideas on the details?<br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Kind regards,</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">Aurélien<br></div><br></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><font style="font-family:courier new,monospace" size="1">---<br>Praise the Caffeine embeddings<br></font></div></div></div></div></div>