[Pkg-openssl-devel] Bug#802591: Please provide libssl udeb as well as the libcrypto udeb

Marga Manterola marga at google.com
Wed Oct 21 14:59:19 UTC 2015


Hi,
On Wed, Oct 21, 2015 at 4:44 PM Raphael Geissert <atomo64 at gmail.com> wrote:

> On 21 October 2015 at 15:10, Marga Manterola <marga at google.com> wrote:
> > openssl is currently building an udeb for libcrypto but not for libssl.
> This
> > bug report is to add the corresponding libssl udeb to allow for ssl
> support.
> >
> > As I've discussed with Cyril during DebConf15, I'm interested in seeing
> > https support in the Debian's debian-installer (it's already available in
> > Ubuntu's).
>
> A colleague of mine has done all this work already; moreover, I
> thought it had all been submitted to Debian.


Which work specifically? I've already sent patches both for libssl and
wget. These patches are based on the work done by Colin Watson for Ubuntu,
the only thing I did was apply the changes to the latest versions in Debian.

Is the work your colleague did significantly different from what was done
in Ubuntu? Was it using openssl or gnutls?

Are you missing any piece of support? I could look into forwarding that.
>

Ubuntu has been applying these patches for a few years and it works just
fine. I'm interested in seeing this support also in Debian instead of
having Ubuntu carry this difference unnecessarily.  I believe other Debian
users or Debian derivatives might be interested in having https support as
well.

As I mentioned, an alternative would be to use gnutls instead of openssl. I
did the work to get the udeb for that, but I discarded it because the
result was larger and with additional dependencies that would also require
separate udebs. This means a much bigger initramfs, and as the condition
mentioned by Cyril was that the size difference shouldn't be too much, I'd
prefer to go with openssl as the resulting size diff is smaller.
-- 
Cheers,
Marga
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-openssl-devel/attachments/20151021/b3418d63/attachment-0001.html>


More information about the Pkg-openssl-devel mailing list