Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

enable building rh9 rpm with shared openssl #799

Merged
merged 1 commit into from
Feb 22, 2024

Conversation

qrkourier
Copy link
Member

No description provided.

@qrkourier qrkourier requested a review from a team as a code owner February 15, 2024 23:19
@qrkourier
Copy link
Member Author

Clarification: this change makes it possible for us to test the OpenSSL build using the CPack builder machinery. This does not change the release build to OpenSSL from static Mbed-TLS.

@@ -45,6 +45,7 @@ done
--preset "${cmake_preset}" \
-DCMAKE_BUILD_TYPE="${cmake_config}" \
-DBUILD_DIST_PACKAGES=ON \
"${TLSUV_TLSLIB:+-DTLSUV_TLSLIB=${TLSUV_TLSLIB}}" \
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do this for redhat-9 only? If this is just a quick trick for us then maybe a comment here to explain the purpose.

Is there any value in doing it for other distros (keeping in mind that just setting TLSUV_TLSLIB to openssl is only sufficient on distros that already have libssl3 - other distros will also need "openssl" to be added to vcpkg.json).

There is one downside to this and I'm not sure how to handle it. "mbedtls" is currently defined as a dependency in vcpkg.json, which means that vcpkg will download and build mbedtls whether or not the build actually uses it (which is determined by TLSUV_TLSLIB).

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I extended the TLS lib override to RedHat9 so I could try to reproduce the enrollment problem in #517 (comment).

I see what you mean about building Mbed-TLS unnecessarily. I see how to temporarily remove it from vcpkg's deps list, or to replace it with "openssl" for building it statically for distros with libssl v1.

@qrkourier qrkourier merged commit c81442c into main Feb 22, 2024
17 checks passed
@qrkourier qrkourier deleted the build-option--redhat9-shared-openssl branch February 22, 2024 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants