On 23.10.2013 14:05, janI wrote:
On 23 October 2013 13:57, Herbert Duerr <h...@apache.org> wrote:
[..]
  Really nice to see nss being split soon. I hope we can use an external
nss too as the one we include internally is somewhat outdated and
potentially insecure.


Absolutely. For the same reason the internal NSS should be updated. Would
you be interested in doing it? You did a great job of updating some other
AOO-external libs.


When / if we do this update, should we not do like other packages do, have
the lib as a preinstallation requirement, and not something we download ?

If we want to get back into individual linux repositories then using system libraries and dependencies to them is the way to go. For our "greatest common denominator" build works on almost every Linux target this is unfortunately not possible. I'd be happy to be proven wrong.

For our Windows build there is no central repository e.g. from Microsoft where we could say we'd depend on e.g. the latest NSS so that the MSI-Installer automatically fetches them. For our Windows platform target this is unfortunately not yet possible. Maybe it will work one day in the Windows app store? That's certainly an interesting topic and maybe we'll find volunteers for it.

Also Mac doesn't provide NSS in its system. It also doesn't provide the concept of external dependencies that the system installer would take care of. Maybe this is something they'll do in the future in their app store. That's another interesting topic and volunteers may find worth investigating?

Summary: there are good reasons why we are still bringing our own nss. For cases where we can rely on external facilities to provide our dependencies we should go for it. Volunteers are welcome.

I have had pretty the same thought for all external libs (ext_libraries)
and to a part also (ext_sources).

But maybe I am completely wrong.

Not at all. IF we can depend on stuff being there then we should depend on it being there. In such cases installing/using our own libs would be counterproductive. The problem is that the IF is currently too often on the wrong side so we for now do the "better safe than sorry" solution.

Herbert

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@openoffice.apache.org
For additional commands, e-mail: dev-h...@openoffice.apache.org

Reply via email to