On pe, 07 heinä 2017, Jaroslav Reznik wrote:
= System Wide Change: Switch OpenLDAP from NSS to OpenSSL = https://fedoraproject.org/wiki/Changes/OpenLDAPwithOpenSSL Change owner(s): * Matus Honek <mhonek (at) redhat.com> Currently, OpenLDAP in Fedora is compiled with NSS (aka MozNSS) for cypto. OpenLDAP is going to be compiled with OpenSSL, instead. == Detailed Description == OpenLDAP in Fedora is has been compiled with NSS for crypto for several years now. Support layer for NSS was added back in 2008 but the OpenLDAP upstream ceased to keep it up to date since 2014. Reasons for keeping OpenLDAP compiled with NSS was to make it work with some other packages (esp. 389DS) seamlessly. Fixing and keeping downstream patches has become a burden, thus it was decided to switch to OpenSSL, instead.
Note that this actually depends on whether FreeIPA and others can migrate to OpenSSL in Fedora 27. Current understanding that it is not being able to fully migrate to OpenSSL, including handling of updates within F27 time frame, due to aggressive schedule F27 has. So this change should be coordinated well. -- / Alexander Bokovoy _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
