Dear colleagues,

as the changes described in
https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine

were approved and implemented and a week or two has passed, we can
summarize the consequences.

Lack of openssl/engine.h file moved to a separate package is not
processed correctly by packages and requires changes in specs which
also comes with a cost. OpenSSL ABI is kept.

On the other hand, CentOS stream uses a different approach when
openssl keeps ABI, doesn't ship openssl/engine.h, and defines
OPENSSL_NO_ENGINE explicitly, so old applications keep working and at
the same time new application can mostly be rebuilt without
significant problems.
I understand that Fedora has much more packages but there are much
less complaints from CentOS/RHEL than from Fedora.

So I wonder if it's worth changing the engine deprecation mechanism in
Fedora to the one we have in CentOS and if yes, what is the mechanism
for such a change.

-- 
Dmitry Belyavskiy

-- 
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to