Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-03 Thread Dmitry Belyavskiy
Dear Kevin On Wed, Apr 3, 2024 at 8:13 PM Kevin Kofler via devel < devel@lists.fedoraproject.org> wrote: > Joe Orton wrote: > > Given that the ENGINE API is deprecated upstream since OpenSSL 3.0, the > > API is optional upstream, and its use has produced compiler warnings > > since it was introdu

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-03 Thread Kevin Kofler via devel
Joe Orton wrote: > Given that the ENGINE API is deprecated upstream since OpenSSL 3.0, the > API is optional upstream, and its use has produced compiler warnings > since it was introduced in Fedora 36, it seems perfectly reasonable to > disable this API in Fedora 41. I disagree. Disabling an API t

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-03 Thread Dmitry Belyavskiy
Dear Zbyszek, Thanks, I updated the Wiki page correspondingly. On Wed, Apr 3, 2024 at 5:56 PM Zbigniew Jędrzejewski-Szmek < zbys...@in.waw.pl> wrote: > [Replying to two mails at once to conserve some electrons.] > > On Tue, Apr 02, 2024 at 04:03:31PM +0200, Dmitry Belyavskiy wrote: > > Thanks. I

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-03 Thread Zbigniew Jędrzejewski-Szmek
[Replying to two mails at once to conserve some electrons.] On Tue, Apr 02, 2024 at 04:03:31PM +0200, Dmitry Belyavskiy wrote: > Thanks. In the period between the proposal was written and published the > TPM2 provider has landed in Fedora. > PKCS#11 provider is already here for a while. > > Should

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-03 Thread Joe Orton
On Wed, Apr 03, 2024 at 09:50:27AM +0200, Clemens Lang wrote: > There will always be some effort related to such a transition, but > that effort will have to happen one way or the other eventually. I > suspect if Fedora decides to keep ENGINE support, we’ll have the exact > same discussion in a

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-03 Thread Clemens Lang
Hi, > On 2. Apr 2024, at 16:31, Luca Boccassi wrote: > > The fact that such packages are physically present is not enough - they need > to implement all the needed features, and they need to be mature enough to > just work out of the box. Neither of these are true today, and providers just >

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-02 Thread Dmitry Belyavskiy
Dear Gary, On Tue, Apr 2, 2024 at 5:39 PM Gary Buhrmaster wrote: > On Tue, Apr 2, 2024 at 3:12 PM Dmitry Belyavskiy > wrote: > > > Third-party engines may be a problem but as we don't break ABI, it's not > a problem of the moment. > > The fact you are removing the headers means it is > a proble

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-02 Thread Gary Buhrmaster
On Tue, Apr 2, 2024 at 3:12 PM Dmitry Belyavskiy wrote: > Third-party engines may be a problem but as we don't break ABI, it's not a > problem of the moment. The fact you are removing the headers means it is a problem for 3rd party engines who build from source (and everyone should at least occ

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-02 Thread Dmitry Belyavskiy
Dear Luca On Tue, Apr 2, 2024 at 4:32 PM Luca Boccassi wrote: > > Hi Zbigniew! > > > > On Tue, Apr 2, 2024 at 1:15 PM Zbigniew Jędrzejewski-Szmek < > > zbyszek(a)in.waw.pl> wrote: > > > > > > Thanks. In the period between the proposal was written and published the > > TPM2 provider has landed in

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-02 Thread Luca Boccassi
> Hi Zbigniew! > > On Tue, Apr 2, 2024 at 1:15 PM Zbigniew Jędrzejewski-Szmek < > zbyszek(a)in.waw.pl> wrote: > > > Thanks. In the period between the proposal was written and published the > TPM2 provider has landed in Fedora. > PKCS#11 provider is already here for a while. The fact that such p

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-02 Thread Dmitry Belyavskiy
Hi Zbigniew! On Tue, Apr 2, 2024 at 1:15 PM Zbigniew Jędrzejewski-Szmek < zbys...@in.waw.pl> wrote: > On Tue, Apr 02, 2024 at 10:45:32AM +0100, Aoife Moloney wrote: > > == Summary == > > We disable building the packages using ENGINE API in OpenSSL without > > breaking ABI. > > "Without breaking A

Re: F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-02 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Apr 02, 2024 at 10:45:32AM +0100, Aoife Moloney wrote: > == Summary == > We disable building the packages using ENGINE API in OpenSSL without > breaking ABI. "Without breaking ABI" is a improvement. Everything else — not so much. > == Detailed Description == > We are going to deprecate Op

F41 Change Proposal: OpenSSL Deprecate Engine (system-wide)

2024-04-02 Thread Aoife Moloney
Wiki - https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine This is a proposed Change for Fedora Linux. This document represents a proposed Change. As part of the Changes process, proposals are publicly announced in order to receive community feedback. This proposal will only be implement