which openssl should I use?

[Jason W]

I had to install a video card as my intel onboard does not like Xorg, and I rarely use Xorg, but Xorg-7.4 is working fine for me here in TC 4.x with libssl-0.9.8.tcz and not openssl-0.9.8.  Below is my setup:

Code: [Select]

tc@box:~$ cat .xsession | grep X
/usr/local/bin/Xorg -nolisten tcp &
waitforX
[ -d ".X.d" ] && find ".X.d" -type f -print | while read F; do . "$F"; done
tc@box:~$ ls /usr/local/tce.installed/
Xorg-7.4          expat2            gtk2              minefield8
Xorg-7.6-lib      fontconfig        libasound         pango
Xorg-fonts        gdk-pixbuf2       libffi            pixman
atk               glib2             libssl-0.9.8      shared-mime-info
cairo             graphics-libs-1   libxml2
tc@box:~$ ps | grep Xorg
  888 root     /usr/local/bin/Xorg -nolisten tcp
 1595 tc       grep Xorg
tc@box:~$



[floppy]

I am assuming you have libssl-0.9.8.tcz installed and loaded before Xorg?

I dont remember (Im not on the pc). I simply load MC + onboot.lst -> Xorg + (tcl-Apps = Xlibs + wbar + Xprogs + Flwm_Topside) + fluff.
I dont think libssl is loaded with this list.

[Jason W]

Ok, it may work to update your dep files and fetch the missing libssl then.

[Jason W]

On the static issue, I had rebuilt some extensions out of curiosity to see what kind of size increase we would be seeing, and there were some ridiculous size gains in some of the ones I built.  Openssh.tcz grew from about 888kb to 4.6mb.  That is over a five fold increase and I saw some other similar increases in other extensions, though none as much as openssh.tcz since is so tightly dependent on openssl.  Of course, it would not be such a big deal if an extension grew by a megabyte-ish, but it is each binary or library that will grow that is ssl dependent. 

Given this, I contacted some of our main extension makers and so far the agreement is unanimous that a shared build of openssl is overall advantageous.  I should have looked deeper into this earlier, but it will be seamless to update the openssl-1.0.0 extension to be shared.  It simply means that once about every 3 years we will deprecate the current openssl into a libssl extension for legacy extension support.  And three years is enough time to migrate from one version to another, but with the libssl extension availability there is still no pressure in that regard.

I will rebuild the openssl-1.0.0 extension to be shared and no changes on the part of extension makers or users is required.  Thanks everyone for your patience.

[cURIOUSgEORGE]

 Is openssl needed for browsing the web securely when I go to https sites or is it just for people running servers???

 

[Jason W]

Most browsers use their own ssl implementation.

[cURIOUSgEORGE]

Thank ya Jason.