From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id AOHcHj70N2D4TQAA0tVLHw (envelope-from ) for ; Thu, 25 Feb 2021 19:02:22 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id 2MyzGj70N2AJCgAA1q6Kng (envelope-from ) for ; Thu, 25 Feb 2021 19:02:22 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 9A73D266E4 for ; Thu, 25 Feb 2021 20:02:21 +0100 (CET) Received: from localhost ([::1]:46298 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1lFLu0-000460-FH for larch@yhetil.org; Thu, 25 Feb 2021 14:02:20 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:50676) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lFLtm-00045K-FX for bug-guix@gnu.org; Thu, 25 Feb 2021 14:02:06 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:56034) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1lFLti-0002mP-I5 for bug-guix@gnu.org; Thu, 25 Feb 2021 14:02:03 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1lFLti-0001Mb-E4 for bug-guix@gnu.org; Thu, 25 Feb 2021 14:02:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#46602: Removing OpenSSL 1.0 Resent-From: zimoun Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Thu, 25 Feb 2021 19:02:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 46602 X-GNU-PR-Package: guix X-GNU-PR-Keywords: security To: Leo Famulari Received: via spool by 46602-submit@debbugs.gnu.org id=B46602.16142797024241 (code B ref 46602); Thu, 25 Feb 2021 19:02:02 +0000 Received: (at 46602) by debbugs.gnu.org; 25 Feb 2021 19:01:42 +0000 Received: from localhost ([127.0.0.1]:39347 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lFLtN-000163-Gd for submit@debbugs.gnu.org; Thu, 25 Feb 2021 14:01:41 -0500 Received: from mail-qt1-f176.google.com ([209.85.160.176]:37068) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1lFLtL-0000zm-Mt for 46602@debbugs.gnu.org; Thu, 25 Feb 2021 14:01:40 -0500 Received: by mail-qt1-f176.google.com with SMTP id v3so4921321qtw.4 for <46602@debbugs.gnu.org>; Thu, 25 Feb 2021 11:01:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=a7UzCQdVMb05Tg/DoE3al4yXI1ERxPM7AisVAkIC+RU=; b=BEt7UCyhtfuvBe02UluAPfsSQk2bMl0ctl4Fat1yY/eaolbgzyT03y1fn7n9F/FXcM zoo/WFLA7LFqi8NmrwTwInF90RLocDhMnZmZpgieRlLQl8Q/FAAPQDXiip78FbOWVqyR nQTY9gngudZ8Mm2zM1wrsbIDJ0G38txL8M6Wb775RaynDen2GPOaDeDTtLfeZCkvsM9G mgcm77zzw+az7bMQ0P8exYhRdRy3OCLCl6gW6wDXEfUkJEEaSJaLtImtuoAgh+U/ALK6 8GPZ4WtmLBtj+oSti8X0H/jR7+peGnd8yafeVC0stYqp5JPwRy4FPhtkp9VG+wo1X2Wq U2QA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=a7UzCQdVMb05Tg/DoE3al4yXI1ERxPM7AisVAkIC+RU=; b=kBQ/ofSwLXImTVFqq15KQNj7xEonOJ2atFDdTBFSzOPWLtexOdKt51RYHRNIMP6WH3 3kziOrt8TrJRxwFk8wZ8pWr9ccYAF1vorVwWXl0g9J8c+p7IsYFGRfp9lYorPWHtzPTA hkSzte1FHC5Oshf+mQvdxInIcEIz/0PEJWjE4dxZtqFEu2DoRUN4msDC3PxTMF82lnmX 7dXRMYsl+hmmkZw02wwIX8wVFSWBX+ZmnmB/B8uWrLdAvielXBZ5RHLA8SnbnanWKuu4 tL0eFJ7ps/fViO1Vz5allv9boEj5ZsuD8OVQcXAB/uoxdutsgXAmz3YX4cgtJLgSvZF2 WGfQ== X-Gm-Message-State: AOAM532INyyznyGNGaM7Ds/Iy3CVpzLNinywY1yEy4S2IEXYwJQ/LpDJ zdFp6nHU7/cEOsb/xC0vzacYyhSqNh0DAbk9kx/gyZTMsrk= X-Google-Smtp-Source: ABdhPJzGmFTGk//SuYEATFB9CT0ZlXaHwO6Wuv/jJoQ69Um0mMB7NRT4G3QmJQQxPp2vHsrlBJ3aFc6u2yI0sRyOt6w= X-Received: by 2002:ac8:57c1:: with SMTP id w1mr3832579qta.313.1614279693914; Thu, 25 Feb 2021 11:01:33 -0800 (PST) MIME-Version: 1.0 References: In-Reply-To: From: zimoun Date: Thu, 25 Feb 2021 20:01:22 +0100 Message-ID: Content-Type: text/plain; charset="UTF-8" X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: 46602@debbugs.gnu.org Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -1.27 Authentication-Results: aspmx1.migadu.com; dkim=fail ("headers rsa verify failed") header.d=gmail.com header.s=20161025 header.b=BEt7UCyh; dmarc=fail reason="SPF not aligned (relaxed)" header.from=gmail.com (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 9A73D266E4 X-Spam-Score: -1.27 X-Migadu-Scanner: scn0.migadu.com X-TUID: tEJqKBSn/6m2 Hi Leo, On Wed, 17 Feb 2021 at 22:43, Leo Famulari wrote: > > OpenSSL 1.0 is no longer supported as free software. As research > continues, new bugs are discovered and there are no fixes available. > > We should remove it soon. Since Qt 4 depends on it, we can remove them > at the same time [0]. > > Some packages will probably have to be removed, since they depend on > OpenSSL 1.0 and have not been updated to use more recent versions. > > OpenSSL 1.0 is used in the Rust bootstrap, unfortunately, so we will > have to preserve some package of it, but it will be hidden. Well, it needs some care I guess. $ guix refresh -l openssl@1.0 Building the following 1930 packages would ensure 2048 dependent packages are rebuilt On the other hand, grepping for "openssl-1.0" returns: 16 matches 12 files contained matches 1522 files searched File: distributed.scm File: networking.scm File: databases.scm File: rust.scm File: web-browsers.scm File: android.scm File: web.scm File: crypto.scm File: messaging.scm File: ntp.scm File: crates-io.scm File: qt.scm Therefore, a good start seems to try to build all the 16 packages depending on openssl@1.0 with openssl@1.1. And mark them with a comment if they fail. But I guess that openssl@1.0 is a strong requirement for these 16 packages. For instance, the package psyclpc (gnu packages messaging) could be removed since it does not build and use openssl@1.0. Cheers, simon