Lukas Vacek <lucas.va...@gmail.com> added the comment:

In ideal world OpenSSL would provide stable ABI just like the other libraries 
Python depends on. That would be, unarguably, the best way to achieve that 
goal. Agreed.

Aferall frequent OpenSSL ABI breakages are the reason why apple switched to 
their own cryptography ABI 
(https://developer.apple.com/library/archive/documentation/Security/Conceptual/cryptoservices/SecureNetworkCommunicationAPIs/SecureNetworkCommunicationAPIs.html):

"""
Although OpenSSL is commonly used in the open source community, it doesn’t 
provide a stable API from version to version. For this reason, the programmatic 
interface to OpenSSL is deprecated in macOS and is not provided in iOS. Use of 
the Apple-provided OpenSSL libraries by apps is strongly discouraged.

To ensure compatibility, if your app depends on OpenSSL, you should compile it 
yourself and statically link a known version of OpenSSL into your app. Such use 
works on both iOS and macOS.
"""

However, OpenSSL does not provide stable ABI and Python should deal with that 
as nicely as possible. If you can think of a better real world solution than 
static linking OpenSSL please share and let's do it!

----------

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue38794>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to