Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Apr 2, 2024 at 3:12 PM Dmitry Belyavskiy <dbelyavs@xxxxxxxxxx> wrote:

> Third-party engines may be a problem but as we don't break ABI, it's not a problem of the moment.

The fact you are removing the headers means it is
a problem for 3rd party engines who build from
source (and everyone should at least occasionally
be building from source as part of their CI).

I consider removing the headers as breaking
the API, as the headers define the API.
The headers already mark the engine APIs
as deprecated.  Orgs with resources should
be starting their migration, although some
will defer it to the next quarter (and the
next....)

I expect you have no visibility into 3rd party
engines, nor how big an issue this will be
(and can make no statistically valid claim
it will not be an issue unless you have real
numbers to share).  However, *after* RHEL10
is released with engine support removed
RH's TAMs may have a better idea (I am
WAGing most 3rd party engines will be
being used by large customers, and they
are likely to make any concerns known).

I believe this should be part of OpenSSL 4.0.
It will be a clear change.  There is no
compelling reason for this to happen
today via the headers.  Instead this should
be a marketing campaign by OpenSSL
to remind everyone that engines are
going away with OpenSSL 4.0 with every
new set of release notes (first item,
in double bold), and that orgs need to
start their migration.  And then do it again.
 And then do it again.  And when OpenSSL
4.0 is released, you can remind everyone
you warned them.
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux