= Proposed System Wide Change: Switch libcurl back to OpenSSL =
https://fedoraproject.org/wiki/Changes/libcurlBackToOpenSSL

Change owner(s):
* Kamil Dudka <kdudka AT redhat DOT com>

libcurl in Fedora currently uses the NSS (Network Security Services)
library for TLS and cryptography. After implementing this change,
libcurl will use OpenSSL instead of NSS.


== Detailed Description ==
In order to make even smaller Fedora base images, it was proposed to
switch libcurl back to OpenSSL. The Fedora Crypto Consolidation
project, which motivated the switch of libcurl from OpenSSL to NSS ten
years ago, is now deprecated and libcurl is the only package that
pulls NSS as its dependency into the Fedora base image. Hence, by
switching libcurl back to OpenSSL, we could create Fedora base image
that contains fewer crypto libraries inside.


== Scope ==
* Proposal owners:
kdudka (will push the following patch:
https://src.fedoraproject.org/cgit/rpms/curl.git/commit/?id=7c3b67bb
and rebuild curl)

* Other developers:
psabata, ignatenko, sgallagh (will help to resolve possible breakages
caused by the patch)

* Release engineering:
No action from release engineering is needed for this change (libcurl
ABI is kept).

* Policies and guidelines:
unaffected

* Trademark approval:
not needed
-- 
Jan Kuřík
Platform & Fedora Program Manager
Red Hat Czech s.r.o., Purkynova 99/71, 612 45 Brno, Czech Republic
_______________________________________________
devel-announce mailing list -- devel-announce@lists.fedoraproject.org
To unsubscribe send an email to devel-announce-le...@lists.fedoraproject.org

Reply via email to