Re: [PATCH 0/1] OpenSSL 1.1.0

[Leo Famulari <leo@famulari.name>]

On Sat, Sep 03, 2016 at 03:50:55PM +0200, Ludovic Courtès wrote:
> Leo Famulari <leo@famulari.name> skribis:
> > When I put "openssl" in the 'name' field, as attached, `guix build
> > openssl` gives me 1.1.0, which is not right. The other *-next packages
> > all seem to use "name-next" as the name.
> 
> Yes, but it’s different.  Guile 2.1, for instance, is the development
> series, so it makes sense to give it a different name so users don’t end
> up using the “wrong” series.
> 
> Conversely, IIUC, OpenSSL 1.1.0 is the new stable series, no?

1.1.0 is the new stable series, but I haven't found any software that
can use the new interface yet. So, I don't want to make 1.1.0 the
default OpenSSL version in Guix. Does that make sense?

> > Also, I wonder if this should inherit from openssl?
> >
> > Presumably there will be more security updates to openssl@1.0.2 before
> > openssl@1.1.0 is ready for general use, and I'd wouldn't like for
> > openssl@1.0.2 updates to be delayed while we wait to see if
> > openssl@1.1.0 still builds with the changes.
> 
> Though OpenSSL builds in 5–10 minutes, so the extra check wouldn’t take
> so long, no?

I guess it will not matter for now, since nothing will be using it. When
it becomes widely used, we can revisit this question.