[MacPorts] #51516: MacPorts should use a bundled copy of a newer libcurl and SSL library rather than the OS X version

MacPorts noreply at macports.org
Sun Jun 2 21:08:55 UTC 2024


#51516: MacPorts should use a bundled copy of a newer libcurl and SSL library
rather than the OS X version
--------------------------+--------------------------------
  Reporter:  ryandesign   |      Owner:  macports-tickets@…
      Type:  enhancement  |     Status:  new
  Priority:  Normal       |  Milestone:  MacPorts Future
 Component:  base         |    Version:
Resolution:               |   Keywords:
      Port:               |
--------------------------+--------------------------------

Comment (by catap):

 Replying to [comment:128 noloader]:
 > Replying to [comment:119 catap]:
 > > Replying to [comment:118 kencu]:
 > > > or could we statically link against {{{/opt/local/lib/libcurl.a}}}
 to keep the installation robust between updates, I wonder...
 > >
 > > that mean that in case security update of curl a brand new version of
 MacPorts should be released.
 >
 > In the case of static linking for bootstrapping, cURL should be built
 with minimum components -- HTTPS and CA-certificates, and not much more.
 >

 Which includes modern OpenSSL.

 And this is quite deep hole.

-- 
Ticket URL: <https://trac.macports.org/ticket/51516#comment:129>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list