openssl and openssh

Brandon Allbery allbery.b at gmail.com
Thu Mar 15 19:21:12 PDT 2012


On Thu, Mar 15, 2012 at 19:55, Dan Ports <dports at macports.org> wrote:

> Part of the problem is that openssl 1.0.x versions are supposed to be
> binary-compatible, but this wasn't true in the past (e.g. 0.9.8 and
> 0.9.7 weren't). So the check openssh is doing is now bogus. See
> https://bugzilla.mindrot.org/show_bug.cgi?id=1991
>
>

...but was mandatory in pre-1.0 because the openssl policy completely
violated everyone's library versioning policies *and* those policies
designed into various library compatibility systems.

In short, OpenSSL's history of ignoring everyone else in its version
policies continues to bite *everyone*.  I have to wonder how they'll break
everyone else next.  (OpenSSL as a project desperately needs to be replaced
with something sane.)

-- 
brandon s allbery                                      allbery.b at gmail.com
wandering unix systems administrator (available)     (412) 475-9364 vm/sms
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.macosforge.org/pipermail/macports-users/attachments/20120315/a6ddb68b/attachment.html>


More information about the macports-users mailing list