Re: openssl transition

[Adam Majer <adamm@zombino.com>]

On 27/10/16 07:39 AM, Antti J ä rvinen wrote:
> Jörg Frings-Fürst writes:
>
>  > I have read the discussion about the openssl transition here again.
>
> Possibly referring to
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=827061 ??
>
>  > - The parallel use of release 1.0 and 1.1 will not be pursued?
>
> Might be highly problematic, having purposefully 2 different versions
> of the same library in same process isn't the brightest idea. Real
> world example is any application that links openssl and qt library.
> Should you link different openssl version than the one used by qt
> will ..produce interesting results :)

Well, depends how they are used. OpenSSL has versioned symbols, so using 
binaries that are linked via both is not an issue. For example,

  a.out
    - liba
       + openssl 1.0.2
    - libb
       + openssl 1.1.0

should work fine.

The problem is that quite a bit of software probably uses OpenSSL via 
dlopen interface and not via linking. This could result in problems. Qt 
can be patched/rebuild to only look for the 1.0.2 library and resolve 
symbols there. What about other cases?

- Adam