Re: Bug#754513: ITP: libressl -- SSL library, forked from OpenSSL

[Kurt Roeckx <kurt@roeckx.be>]

On Mon, Jul 14, 2014 at 02:09:55PM -0300, Henrique de Moraes Holschuh wrote:
> On Mon, 14 Jul 2014, Kurt Roeckx wrote:
> > I plan to try and get them to use symbol versioning, at least on
> > those platforms that support it.  This will probably be just like
> 
> Thank you.
> 
> > the patch currently in Debian.  I don't plan to add multiple
> > versions of a symbol to try and keep the same soname since that
> > probably won't work on all platforms.
> 
> We want _all_ visible libressl symbols versioned, but that's for protective
> namespacing, and not for backwards binary compatibility.  That's why it
> should be a libressl-specific symbol version, since full guaranteed
> *internal* ABI compatibility with openssl is not really happening.

If it wasn't clear, I was talking about openssl not libressl.

But libressl really should use symbol versions too.  The patch in
Debian's openssl should be a good starting point, but you need to
rename the symbol version to something else.  If you change the
soname you also want to change the symbol versions, so keep that
in mind when picking the version you're going to use.


Kurt