[MacPorts] #54688: nodejs variant to build with bundled openssl

MacPorts noreply at macports.org
Mon Sep 4 11:05:05 UTC 2017


#54688: nodejs variant to build with bundled openssl
-------------------------------------------------+-------------------------
  Reporter:  tgyurci                             |      Owner:  ci42
      Type:  enhancement                         |     Status:  assigned
  Priority:  Normal                              |  Milestone:
 Component:  ports                               |    Version:
Resolution:                                      |   Keywords:
      Port:  nodejs4 nodejs5 nodejs6 nodejs7     |
  nodejs8                                        |
-------------------------------------------------+-------------------------

Comment (by ryandesign):

 We typically do not want to use bundled versions of third party libraries.
 Consider what would happen if an openssl vulnerability were found. We
 would update the openssl port, and every other port that used openssl
 would thus receive the fix, but nodejs would not, since it would be using
 its own still-vulnerable copy.

 However, I understand your point regarding libressl. If any port that uses
 openssl is not compatible with libressl, that makes it difficult to
 continue to use libressl with other ports. This is why I think pretending
 that libressl is a drop-in replacement for openssl was a mistake, and
 MacPorts should instead have openssl and libressl install to different
 locations, not conflict with one another, and all ports that support
 openssl and libressl should be modified to offer openssl and libressl
 variants.

--
Ticket URL: <https://trac.macports.org/ticket/54688#comment:2>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list