Hi Dima, > On 22. Jul 2024, at 13:34, Dmitry Belyavskiy <dbely...@redhat.com> wrote: > > Dear colleagues, > > as the changes described in > https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine > > were approved and implemented and a week or two has passed, we can > summarize the consequences. > > Lack of openssl/engine.h file moved to a separate package is not > processed correctly by packages and requires changes in specs which > also comes with a cost. OpenSSL ABI is kept. > > On the other hand, CentOS stream uses a different approach when > openssl keeps ABI, doesn't ship openssl/engine.h, and defines > OPENSSL_NO_ENGINE explicitly, so old applications keep working and at > the same time new application can mostly be rebuilt without > significant problems. > I understand that Fedora has much more packages but there are much > less complaints from CentOS/RHEL than from Fedora. > > So I wonder if it's worth changing the engine deprecation mechanism in > Fedora to the one we have in CentOS and if yes, what is the mechanism > for such a change.
I believe the answer is yes. I’m working on making sure we catch all users of the ENGINE API and tell them about this change in https://bugzilla.redhat.com/show_bug.cgi?id=2296114. I’ve recently been pointed to https://docs.fedoraproject.org/en-US/fesco/Mass_package_changes/, which explains the process to follow when mass-filing bugs. I don’t know whether there would be any specific other Fedora process we would have to follow — maybe others can chime in on this. -- Clemens Lang RHEL Crypto Team Red Hat -- _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
