openssl-0.9.8

[Jason W]

Openssl updated to 0.9.8n and extension name is now openssl-0.9.8.tcz.  WIll be last name change for the 0.9.8 series.  For those with existing tce directories, use Appsaudit to update dep files, then simply install openssl-0.9.8.tcz extension, remove openssl-0.9.8m.tcz and reboot.

Code: [Select]

Title:          openssl-0.9.8-dev.tcz
Description:    Openssl development files.
Version:        0.9.8n
Author:         OpenSSL Project
Original-site:  http://www.openssl.org/
Copying-policy: OpenSSL License:  http://www.openssl.org/source/license.html
Size: 1.5M
Extension_by:   Jason W
Comments:       Requires the openssl-0.9.8m.tcz extension and compiletc.
This extension is PPI compatible.
Change-log:     2008/07/30 First version 0.9.8h
2008/12/03 Rebuilt for i486 and size.
2009/09/09 Updated to 0.9.8k.
2010/02/27 Updated to 0.9.8m
Current: 2010/04/03 Updated to 0.9.8n and removed patchlevel from name.



Code: [Select]

Title:          openssl-0.9.8-doc.tcz
Description:    The Open Source toolkit for SSL/TLS docs
Version:        0.9.8n
Author:         OpenSSL Project
Original-site:  http://www.openssl.org/
Copying-policy: OpenSSL License:  http://www.openssl.org/source/license.html
Size: 946M
Extension_by:   Jason W
Comments:       ----------
Change-log:     2008/07/30 First version 0.9.8h
        2008/12/11 Rebuilt for i486, size, cramfs.
2010/02/27 Updated to 0.9.8m
Current: 2010/04/03 Updated to 0.9.8n and removed patchlevel from name.



Code: [Select]

Title:          openssl-0.9.8.tcz
Description:    The Open Source toolkit for SSL/TLS
Version:        0.9.8n
Author:         OpenSSL Project
Original-site:  http://www.openssl.org/
Copying-policy: OpenSSL License:  http://www.openssl.org/source/license.html
Size: 1.1M
Extension_by:   Jason W
Comments:       ----------
Change-log:     2008/07/30 First version 0.9.8h
        2008/12/11 Rebuilt for i486, size, cramfs.
2010/02/27 Updated to 0.9.8m
Current: 2010/04/03 Updated to 0.9.8n and removed patchlevel from name.



[maro]

Jason: I believe there is a tiny, but harmless issue with the startup script. At installation time one gets:

Code: [Select]

mkdir: cannot create directory '/usr/local/etc/ssl/private': File exists
mkdir: cannot create directory '/usr/local/etc/ssl/certs': File exists

Looking into the script I believe it is meant to be
    [ -d /usr/local/etc/ssl/private ] || mkdir /usr/local/etc/ssl/private
    [ -d /usr/local/etc/ssl/certs ] || mkdir /usr/local/etc/ssl/certs
instead of the [ -d ... ] && mkdir ... No harm done, since the directories should always exist, as they are part of the extension.

[Jason W]

Yeah, it was meant to check for existence and create if not there.  I will fix it.

Thanks.

[maro]

I just noticed that 'openssl-0.9.8o' has been released. Might be worth an update for 2.x at some stage.

Furthermore (even though this is the 2.x section) I wonder whether 3.x should aim to use version 1.0.0a. According to the announcement: "... We consider OpenSSL 1.0.0a to be the best version of OpenSSL available and we strongly recommend that users of older versions upgrade as soon as possible. ...". I guess now might be a good time to take the plunge, even though it could result in a fair number of rebuilds for 3.x.

[althalus]

I just noticed that 'openssl-0.9.8o' has been released. Might be worth an update for 2.x at some stage.

Furthermore (even though this is the 2.x section) I wonder whether 3.x should aim to use version 1.0.0a. According to the announcement: "... We consider OpenSSL 1.0.0a to be the best version of OpenSSL available and we strongly recommend that users of older versions upgrade as soon as possible. ...". I guess now might be a good time to take the plunge, even though it could result in a fair number of rebuilds for 3.x.

I think the best way would be to have two openssl extensions in the 3.x repo - one for 0.9.8 and one for 1.0.0 - People can migrate their old extensions gradually, and the TC team could knock back any new extensions where the maintainer has been silly enough to build against  the older 0.9.8 instead of the "recommended" version.

(This could probably be split out into it's own topic...)

[Jason W]

I will update openssl-0.9.8 to the latest patch level.

But to move to version 1.0.0 will not be pretty regardless of when we decide to do it.  As discussed in previous threads, there is only room for one version of openssl in the repo at one time.  And so many extensions will have to be rebuilt and in the order of dependency.  A rebuild like that would almost require timing it with major TC upgrade before any ssl dependent extensions are copied to the new repo. 

I personally would like that rebuild to coincide with either a gtk-3.0 and/or Python-3.0 update to knock out two or more birds with one stone. 

[bmarkus]

I personally would like that rebuild to coincide with either a gtk-3.0 and/or Python-3.0 update to knock out two or more birds with one stone.  

Python 3.x is a different language and not backward compatible to 2.x line. This means, that python.tcz must be the latest 2.x and kept for a long time in the repo. ".x can't be updated or upgraded to 3.x ! If there is a need for 3.x in the repo it must be called python3 or something like that.

It was told that latest will be 2.6 but the fact is, that now there is 2.7 RC1 which shows the incompatibility between 2.x and 3.x too.

BTW, latest 3.x release is 3.1.2

[Jason W]

True, though the incompatibility was actually the point I was making, that it cannot be updated in place.  But at least python can have more than one version in the repo.  The last python update from 2.5 to 2.6 as the main version was manageable. 

I am hoping that the eventual transition to gtk 3 will be like it was with the release of gtk2 - allowing the older version to remain installed and not interfering with the new one or it's apps, and vice versa.  They may have mentioned it somewhere, I haven't seen yet.

[Jason W]

Updated:

Code: [Select]

Title:          openssl-0.9.8-dev.tcz
Description:    Openssl development files.
Version:        0.9.8o
Author:         OpenSSL Project
Original-site:  http://www.openssl.org/
Copying-policy: OpenSSL License:  http://www.openssl.org/source/license.html
Size: 1.5M
Extension_by:   Jason W
Comments:       Requires the openssl-0.9.8.tcz extension and compiletc.
This extension is PPI compatible.
Change-log:     2008/07/30 First version 0.9.8h
2008/12/03 Rebuilt for i486 and size.
2009/09/09 Updated to 0.9.8k.
2010/02/27 Updated to 0.9.8m
2010/04/03 Updated to 0.9.8n and removed patchlevel from name.
Current: 2010/06/14 Updated to 0.9.8o



Code: [Select]

Title:          openssl-0.9.8.tcz
Description:    The Open Source toolkit for SSL/TLS
Version:        0.9.8o
Author:         OpenSSL Project
Original-site:  http://www.openssl.org/
Copying-policy: OpenSSL License:  http://www.openssl.org/source/license.html
Size: 1.1M
Extension_by:   Jason W
Comments:       ----------
Change-log:     2008/07/30 First version 0.9.8h
        2008/12/11 Rebuilt for i486, size, cramfs.
2010/02/27 Updated to 0.9.8m
2010/04/03 Updated to 0.9.8n and removed patchlevel from name.
Current: 2010/06/14 Updated to 0.9.8o