Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Specify OpenSSL versions for conf-libssl #27165

Open
liyishuai opened this issue Dec 21, 2024 · 1 comment
Open

Specify OpenSSL versions for conf-libssl #27165

liyishuai opened this issue Dec 21, 2024 · 1 comment

Comments

@liyishuai
Copy link
Contributor

liyishuai commented Dec 21, 2024

  1. async_ssl v0.16.0 requires SSL_set1_groups_list.
  2. SSL_set1_groups_list was first introduced in OpenSSL 1.1.1.
  3. The current conf-libssl package picks openssl-devel on Fedora:
    ["openssl-devel"] {os-distribution = "centos"}
    ["openssl-devel"] {os-distribution = "ol"}
    ["openssl-devel"] {os-distribution = "fedora" | os-family = "fedora"}
  4. CentOS 7 provides openssl-devel with version 1.0.2k.
  5. The proper way to get OpenSSL 1.1 is via the openssl11-devel package on EPEL 7.

The current conf-libssl package doesn't provide any version guarantee for OpenSSL, so it doesn't guarantee successful compilation of dependants.

@mseri
Copy link
Member

mseri commented Dec 24, 2024

We could create a new conf-libssl version with the correct package name, however centos7 is no longer supported so we cannot test it.

Otherwise it is currently possible to work around it by installing openssl11-devel by hand and using opam install async_ssl --assume-depexts to skip the depext step

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants