Soname bump for openssl

[Tomas Mraz]

Hi all,

I'd like to upgrade OpenSSL to 1.0.0-beta3 version just after the F12
Alpha release. I asked rel-eng to create a custom build target for the
rebuild so we can avoid shipping the symlink hacks in rawhide.

The API did not change in a way it would break any sensible user's of
the API, so no patches to the dependent packages are expected to be
necessary.

Unfortunately as this is major version upgrade the ABI changed.

I know that the upgrade would be better before the F12 Alpha however it
required major patch porting for the FIPS validation related code which
is not included in the upstream 1.0.0 branch. I was unfortunately not
able to complete this porting before Alpha Freeze.

As always I will rebuild all the dependent packages if you do not ask me
otherwise for your package.
-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb

[Josh Boyer]

On Wed, Aug 12, 2009 at 11:45:50AM +0200, Tomas Mraz wrote:
> Hi all,
>
> I'd like to upgrade OpenSSL to 1.0.0-beta3 version just after the F12
> Alpha release. I asked rel-eng to create a custom build target for the
> rebuild so we can avoid shipping the symlink hacks in rawhide. 
A few questions:

Why a beta version?
Is there a good chance the final upstream release will be done before F12 GAs?
Will the beta nature of the release cause lots of potential rebuilds as you
update it with newer betas?

josh

[Tomas Mraz]

On Wed, 2009-08-12 at 07:36 -0400, Josh Boyer wrote:
>  On Wed, Aug 12, 2009 at 11:45:50AM +0200, Tomas Mraz wrote:
>  >Hi all,
>  >
>  >I'd like to upgrade OpenSSL to 1.0.0-beta3 version just after the F12
>  >Alpha release. I asked rel-eng to create a custom build target for the
>  >rebuild so we can avoid shipping the symlink hacks in rawhide.
>  
>  A few questions:
>  
>  Why a beta version? 
Because the changes on the 1.0.0 branch will not break ABI as
they will
be bugfix-only and it will allow us to upgrade to 1.0.0 later.

>  Is there a good chance the final upstream release will be done before
> F12 GAs? 
Yes, there is, but of course I cannot guarantee that. But it shouldn't
be a problem too big as the beta3 is already in pretty good shape.

>  Will the beta nature of the release cause lots of potential rebuilds
> as you
>  update it with newer betas? 
If you mean rebuilds of dependencies then definitely
not. And even
rebuilds of openssl there should not be many as I suppose there will be
a final release soon.

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb

[Josh Boyer]

On Wed, Aug 12, 2009 at 03:38:27PM +0200, Tomas Mraz wrote:
> On Wed, 2009-08-12 at 07:36 -0400, Josh Boyer wrote:
> > On Wed, Aug 12, 2009 at 11:45:50AM +0200, Tomas Mraz wrote:
> > >Hi all,
> > >
> > >I'd like to upgrade OpenSSL to 1.0.0-beta3 version just after the F12
> > >Alpha release. I asked rel-eng to create a custom build target for the
> > >rebuild so we can avoid shipping the symlink hacks in rawhide.
> > 
> > A few questions:
> > 
> > Why a beta version?
> Because the changes on the 1.0.0 branch will not break ABI as they will
> be bugfix-only and it will allow us to upgrade to 1.0.0 later. 
Thanks for the quick response!  One more question:

Are we planning for a compat- package for the current OpenSSL version?

josh

[Tomas Mraz]

On Wed, 2009-08-12 at 09:47 -0400, Josh Boyer wrote:
>  On Wed, Aug 12, 2009 at 03:38:27PM +0200, Tomas Mraz wrote:
>  >On Wed, 2009-08-12 at 07:36 -0400, Josh Boyer wrote:
>  >> On Wed, Aug 12, 2009 at 11:45:50AM +0200, Tomas Mraz wrote:
>  >> >Hi all,
>  >> >
>  >> >I'd like to upgrade OpenSSL to 1.0.0-beta3 version just after the F12
>  >> >Alpha release. I asked rel-eng to create a custom build target for the
>  >> >rebuild so we can avoid shipping the symlink hacks in rawhide.
>  >> 
>  >> A few questions:
>  >> 
>  >> Why a beta version?
>  >Because the changes on the 1.0.0 branch will not break ABI as they will
>  >be bugfix-only and it will allow us to upgrade to 1.0.0 later.
>  
>  Thanks for the quick response!  One more question:
>  
>  Are we planning for a compat- package for the current OpenSSL version? 
I currently do not plan it - we did not do it for recent OpenSSL soname
bumps either, however I would not object if anyone wants to make the
compat package.

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb