#46602 - Removing OpenSSL 1.0 - GNU bug report logs

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #10 received at 46602@debbugs.gnu.org (full text, mbox, reply):

Received: (at 46602) by debbugs.gnu.org; 25 Feb 2021 19:01:42 +0000
From debbugs-submit-bounces@debbugs.gnu.org Thu Feb 25 14:01:41 2021
Received: from localhost ([127.0.0.1]:39347 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lFLtN-000163-Gd
	for submit@debbugs.gnu.org; Thu, 25 Feb 2021 14:01:41 -0500
Received: from mail-qt1-f176.google.com ([209.85.160.176]:37068)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <zimon.toutoune@gmail.com>) id 1lFLtL-0000zm-Mt
 for 46602@debbugs.gnu.org; Thu, 25 Feb 2021 14:01:40 -0500
Received: by mail-qt1-f176.google.com with SMTP id v3so4921321qtw.4
 for <46602@debbugs.gnu.org>; Thu, 25 Feb 2021 11:01:39 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025;
 h=mime-version:references:in-reply-to:from:date:message-id:subject:to
 :cc; bh=a7UzCQdVMb05Tg/DoE3al4yXI1ERxPM7AisVAkIC+RU=;
 b=BEt7UCyhtfuvBe02UluAPfsSQk2bMl0ctl4Fat1yY/eaolbgzyT03y1fn7n9F/FXcM
 zoo/WFLA7LFqi8NmrwTwInF90RLocDhMnZmZpgieRlLQl8Q/FAAPQDXiip78FbOWVqyR
 nQTY9gngudZ8Mm2zM1wrsbIDJ0G38txL8M6Wb775RaynDen2GPOaDeDTtLfeZCkvsM9G
 mgcm77zzw+az7bMQ0P8exYhRdRy3OCLCl6gW6wDXEfUkJEEaSJaLtImtuoAgh+U/ALK6
 8GPZ4WtmLBtj+oSti8X0H/jR7+peGnd8yafeVC0stYqp5JPwRy4FPhtkp9VG+wo1X2Wq
 U2QA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20161025;
 h=x-gm-message-state:mime-version:references:in-reply-to:from:date
 :message-id:subject:to:cc;
 bh=a7UzCQdVMb05Tg/DoE3al4yXI1ERxPM7AisVAkIC+RU=;
 b=kBQ/ofSwLXImTVFqq15KQNj7xEonOJ2atFDdTBFSzOPWLtexOdKt51RYHRNIMP6WH3
 3kziOrt8TrJRxwFk8wZ8pWr9ccYAF1vorVwWXl0g9J8c+p7IsYFGRfp9lYorPWHtzPTA
 hkSzte1FHC5Oshf+mQvdxInIcEIz/0PEJWjE4dxZtqFEu2DoRUN4msDC3PxTMF82lnmX
 7dXRMYsl+hmmkZw02wwIX8wVFSWBX+ZmnmB/B8uWrLdAvielXBZ5RHLA8SnbnanWKuu4
 tL0eFJ7ps/fViO1Vz5allv9boEj5ZsuD8OVQcXAB/uoxdutsgXAmz3YX4cgtJLgSvZF2
 WGfQ==
X-Gm-Message-State: AOAM532INyyznyGNGaM7Ds/Iy3CVpzLNinywY1yEy4S2IEXYwJQ/LpDJ
 zdFp6nHU7/cEOsb/xC0vzacYyhSqNh0DAbk9kx/gyZTMsrk=
X-Google-Smtp-Source: ABdhPJzGmFTGk//SuYEATFB9CT0ZlXaHwO6Wuv/jJoQ69Um0mMB7NRT4G3QmJQQxPp2vHsrlBJ3aFc6u2yI0sRyOt6w=
X-Received: by 2002:ac8:57c1:: with SMTP id w1mr3832579qta.313.1614279693914; 
 Thu, 25 Feb 2021 11:01:33 -0800 (PST)
MIME-Version: 1.0
References: <YC2KDCevazOXaZxZ@jasmine.lan>
In-Reply-To: <YC2KDCevazOXaZxZ@jasmine.lan>
From: zimoun <zimon.toutoune@gmail.com>
Date: Thu, 25 Feb 2021 20:01:22 +0100
Message-ID: <CAJ3okZ0ZcrcXtB0BbcfDh1PxG2k9K455Nd4w=3tPSn-KzcAW6g@mail.gmail.com>
Subject: Re: bug#46602: Removing OpenSSL 1.0
To: Leo Famulari <leo@famulari.name>
Content-Type: text/plain; charset="UTF-8"
X-Spam-Score: 0.0 (/)
X-Debbugs-Envelope-To: 46602
Cc: 46602@debbugs.gnu.org
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hi Leo,

On Wed, 17 Feb 2021 at 22:43, Leo Famulari <leo@famulari.name> wrote:
>
> OpenSSL 1.0 is no longer supported as free software. As research
> continues, new bugs are discovered and there are no fixes available.
>
> We should remove it soon. Since Qt 4 depends on it, we can remove them
> at the same time [0].
>
> Some packages will probably have to be removed, since they depend on
> OpenSSL 1.0 and have not been updated to use more recent versions.
>
> OpenSSL 1.0 is used in the Rust bootstrap, unfortunately, so we will
> have to preserve some package of it, but it will be hidden.

Well, it needs some care I guess.

$ guix refresh -l openssl@1.0
Building the following 1930 packages would ensure 2048 dependent
packages are rebuilt

On the other hand, grepping for "openssl-1.0" returns:

16 matches
12 files contained matches
1522 files searched

File: distributed.scm
File: networking.scm
File: databases.scm
File: rust.scm
File: web-browsers.scm
File: android.scm
File: web.scm
File: crypto.scm
File: messaging.scm
File: ntp.scm
File: crates-io.scm
File: qt.scm

Therefore, a good start seems to try to build all the 16 packages
depending on openssl@1.0 with openssl@1.1.  And mark them with a
comment if they fail.  But I guess that openssl@1.0 is a strong
requirement for these 16 packages.

For instance, the package psyclpc (gnu packages messaging) could be
removed since it does not build and use openssl@1.0.

Cheers,
simon

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 11:37:54 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#46602 Removing OpenSSL 1.0