sijie commented on issue #6439: libssl.so should be linked dynamically into the 
libpulsar.so
URL: https://github.com/apache/pulsar/issues/6439#issuecomment-592994420
 
 
   @aahmed-se 
   
   In this use case, the customer is building a database plugin which is a 
dynamic linking library that will be shipped to all database machines. The 
customer will statically link `libpulsar.a` so they just need to ship 
libpulsar.a along with their library. They don't need to install `libpulsar.so` 
and its dependencies. 
   
   However we shouldn't static link `libssl` in libpulsar.a, as this is a 
security red flag. we should just use whatever the libssl the system provides. 
Because if there is a security problem in libssl, all the machines can just 
update their own libssl library without rebuilding libpulsar.a.

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
[email protected]


With regards,
Apache Git Services

Reply via email to