On Fri, Jun 24, 2022 at 02:06:14PM +0200, Tomáš Orsava wrote:
Hi Richard,
porting Python 2.7 to openssl 3.0 doesn't really make sense to me.
We ship Python 2.7 so that developers can test code that needs to work on
Python 2.7 in various deployments like old CentOS/RHEL/etc. Fedora aims to
be a developer-friendly distro and so we want to provide the tools to do
that. Even if it's possible to port Python 2.7 to openssl 3.0 safely with
reasonable effort, which I doubt, it would lead to a different Python 2.7,
which would no longer work as a testing ground for people developing for old
deployments.
IMHO that's not a very compelling use case. Python 2.7 on Fedora
is already quite different from RHEL in terms of crypto, simply by
virtue of Fedora having quite different crypto-policies applied.
If people want to test compatibility with older RHEL/CentOS from
their Fedora dev machine, then containers are the answer and will
give much higher confidence level. Containers already dominate in
cases where people want to test software against different OS,
without having the burden of maintaining a full VM.
With regards,
Daniel
--
|:
https://berrange.com -o-
https://www.flickr.com/photos/dberrange :|
|:
https://libvirt.org -o-
https://fstop138.berrange.com :|
|:
https://entangle-photo.org -o-
https://www.instagram.com/dberrange :|