Recent updates on f27 are blocked because openssl-devel (1.1) conflicts with compat-openssl10-devel (1.0). A large number of packages depends on 1.0, so the only way to upgrade is to --allowerasing, which deletes openssl 1.1 devel packages ( https://bugzilla.redhat.com/show_bug.cgi?id=1625440 ). Those packages used to coexist peacefully up until recently.

I understand that we want to move to openssl 1.1 but the current reality is that it's pushed off the system. Maybe it's not a big deal because apparently it can be uninstalled with no ill effects.

I don't know if it's a real conflict or a packaging artifact that could be reverted. The current situation where the upgrade is blocked unless we --allowerasing is not very good: using it blindly is a bad idea that can result in unusable systems (e.g. https://bugzilla.redhat.com/show_bug.cgi?id=1601724 ).


Actually, the issue of 1.0 vs. 1.1 dependency is a little confusing because, even though the update erased openssl-devel without errors,

    dnf repoquery --whatrequires openssl-devel | wc

returns 1040, when a similar count for compat-openssl10-devel comes out at 265. I think that's because many packages (e.g. libssh2-devel) have dependencies that are satisfied by either openssl-devel or compat-openssl10-devel.

FWIW, a lot of packages need to be converted to 1.1; repoquery shows 196 packages requiring openssl (v1.1), while 322 require compat-openssl10 (v1.0).
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org

Reply via email to