Re: OpenSSL...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Quoting Dustin Oprea <aeolianmeson@xxxxxxxxxxxxxxxx>:

I'm trying to upgrade my OpenSSL installation, but many things depend on the libssl.so.5 library, which is soon to become libssl.so.6 . Is there any way to maintain this older file, while at the same time installing everything else?

There's several ways to solve that problem.

Include both libssl.so.5 and libssl.so.6 in new RPM.  This is the simplest
solution, but the size of your openssl package is going to grow over time. You also won't be able to get rid of libssl.so.5 from the system once you don't need
it anymore.

or

Create compatibility package (like compat-openssl-xxx, where xxx is OpenSSL
version) that will contain only libssl.so.5 (and other runtime libs from
OpenSSL package, such as libcrypto for example).  This is relatively simple
solution, however you'll need to create new compat-libssl-xxx every time you
create new package with new versions of libraries. Red Hat usually does things
this way (you'll find piles of compat-* packages in every Red Hat release for
backward compatibility with old(er) 3rd party applications).

or

When packaging, package runtime libraries (libssl.so.x, libcrypto.so.x and so
on) into separate subpackage called openssl-libs.  Package libssl.so,
libcrypto.so, and so on (links to lib*.so.x) into openssl-devel.  You'd set
dependencies so that openssl requires exactly same version of openssl-libs. Openssl-devel would require exactly same version of both openssl and openssl-libs. Openssl-libs would not depend on either openssl or openssl-devel (obviously). That way, you'll be able to have multiple versions of openssl-libs installed in parallel, but only one version of openssl and openssl-devel. This
is (IMO) the best solution, but requires a bit more initial work to create
subpackages correctly (however, it pays in the long run, since you don't need
to create new compat-* packages).  I believe this is the way Debian handles
libraries (however, haven't worked with Debian in veeeery long time, so not
really sure if this is completely correct statement).


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.


_______________________________________________
Rpm-list mailing list
Rpm-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/rpm-list

[Index of Archives]     [RPM Ecosystem]     [Linux Kernel]     [Red Hat Install]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Red Hat]     [Gimp]     [Yosemite News]     [IETF Discussion]

  Powered by Linux