#49859 - Remove packages that depend on unsupported old OpenSSL releases

Package	Source(s)		Maintainer(s)
guix-patches		PTS Buildd Popcon

Message #52 received at 49859@debbugs.gnu.org (full text, mbox, reply):

Received: (at 49859) by debbugs.gnu.org; 11 Aug 2021 14:08:34 +0000
From debbugs-submit-bounces@debbugs.gnu.org Wed Aug 11 10:08:34 2021
Received: from localhost ([127.0.0.1]:36205 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1mDouI-0006J7-7u
	for submit@debbugs.gnu.org; Wed, 11 Aug 2021 10:08:34 -0400
Received: from eggs.gnu.org ([209.51.188.92]:56114)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@gnu.org>) id 1mDouF-0006Is-Sc
 for 49859@debbugs.gnu.org; Wed, 11 Aug 2021 10:08:32 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e]:60434)
 by eggs.gnu.org with esmtp (Exim 4.90_1)
 (envelope-from <ludo@gnu.org>)
 id 1mDou8-0007Md-5F; Wed, 11 Aug 2021 10:08:24 -0400
Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=48756 helo=ribbon)
 by fencepost.gnu.org with esmtpsa
 (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1)
 (envelope-from <ludo@gnu.org>)
 id 1mDou7-0007ku-SP; Wed, 11 Aug 2021 10:08:24 -0400
From: Ludovic Courtès <ludo@gnu.org>
To: Efraim Flashner <efraim@flashner.co.il>
Subject: Re: bug#49859: Remove packages that depend on unsupported old
 OpenSSL releases
References: <e874bdd3732a0423a9fa1c52f2996411ce08072c.1628040048.git.leo@famulari.name>
 <98b6d8eee70e27683b6617ba92afd7a353514e45.1628040049.git.leo@famulari.name>
 <83DA07E5-55F3-4F1C-9C57-8957526A53B6@lepiller.eu>
 <YQoBD7/TqncxyRG4@jasmine.lan>
 <FCC37C95-6E9F-46C2-8A08-EF9CADB4CEE8@lepiller.eu>
 <YQoHsO+cSPwRamQi@jasmine.lan> <YQrAViNOKnI4nG+4@jasmine.lan>
 <YQudScMrlKJ3DFtC@3900XT>
Date: Wed, 11 Aug 2021 16:08:21 +0200
In-Reply-To: <YQudScMrlKJ3DFtC@3900XT> (Efraim Flashner's message of "Thu, 5
 Aug 2021 11:11:53 +0300")
Message-ID: <877dgsm5uy.fsf_-_@gnu.org>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -2.3 (--)
X-Debbugs-Envelope-To: 49859
Cc: Julien Lepiller <julien@lepiller.eu>, 49859@debbugs.gnu.org,
 Leo Famulari <leo@famulari.name>
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

Hi,

Efraim Flashner <efraim@flashner.co.il> skribis:

> I'm in favor of moving openssl-1.0 to guix-past, it's the perfect type
> of package to go there. Upstream has declared it dead and no one is
> going to touch it. Similar to how qt-4 moved there a few months ago.

Agreed. However…

> ADB and fastboot are still useful, and (ignoring some networking options
> they apparently have) are localhost only. I'd rather leave them both for
> now with an eye to shoehorning in an updated version somehow, hiding
> openssl-1.0, and adding a note to remove it as soon as nothing needs it
> anymore.

… this means we need to keep openssl 1.0, hidden, in Guix proper.  That
sounds like a reasonable option to me.  Leo’s approach of progressively
removing anything that depends on it sounds good to me nevertheless, but
it’s good that we can weigh the pros and cons for each candidate.

Julien said upgrading ADB/fastboot is not an option, at least not now.

Another option would be to patch ADB so it can use OpenSSL 1.1.
Hopefully the changes can be relatively simple and isolated.  Worth
trying?

Ludo’.

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 16:42:46 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#49859 Remove packages that depend on unsupported old OpenSSL releases