On pe, 07 heinä 2017, Jaroslav Reznik wrote:
= System Wide Change: Switch OpenLDAP from NSS to OpenSSL =
https://fedoraproject.org/wiki/Changes/OpenLDAPwithOpenSSL
Change owner(s):
* Matus Honek <mhonek (at) redhat.com>
Currently, OpenLDAP in Fedora is compiled with NSS (aka MozNSS) for
cypto. OpenLDAP is going to be compiled with OpenSSL, instead.
== Detailed Description ==
OpenLDAP in Fedora is has been compiled with NSS for crypto for
several years now. Support layer for NSS was added back in 2008 but
the OpenLDAP upstream ceased to keep it up to date since 2014. Reasons
for keeping OpenLDAP compiled with NSS was to make it work with some
other packages (esp. 389DS) seamlessly. Fixing and keeping downstream
patches has become a burden, thus it was decided to switch to OpenSSL,
instead.
Note that this actually depends on whether FreeIPA and others can
migrate to OpenSSL in Fedora 27. Current understanding that it is not
being able to fully migrate to OpenSSL, including handling of updates
within F27 time frame, due to aggressive schedule F27 has.
So this change should be coordinated well.
--
/ Alexander Bokovoy
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
