Pádraig Brady <[email protected]> writes: >> Nice catch on that and the other patch to mini-gmp. >> By the way, today I found out Gentoo's coreutils package uses >> mini-gmp >> by default. It looks like Sam is looking to change that, though [1]. I >> wonder if any other distributions choose to use mini-gmp for some >> reason. >> Collin >> [1] >> https://archives.gentoo.org/gentoo-dev/bf22d6afd355e01a4c1479ab2b21076f75468578.1790430550.git....@gentoo.org/ > > Oh nice one. > Oh good I see https://repology.org/project/coreutils/versions is back up. > Auditing that shows the main distros depend on gmp appropriately.
FWIW, it doesn't seem like Gentoo's configuration was a mistake. They have a gmp USE flag; it was just disabled by default. The proposed change was to enable it by default since most users will have the package. I guess most people who use large enough numbers to notice the slowdown will likely check their USE flags first. > I've not looked into the homebrew build details, > though it seems strange there is only a runtime dependency on gmp, > but maybe build deps propagate automatically from runtime or soemthing. > Also there are no mention of ssl dependencies in homebrew > (I'm not sure if we support libressl anyway). > https://formulae.brew.sh/api/formula/coreutils.json The only issues I have ever faced with the OpenSSL vs. LibreSSL split have been with TLS APIs, e.g., working with certificates or keys. For relatively simple stuff like message digests, I have not run into issues. Admittedly, I don't use them that much, so perhaps someone with more knowledge can correct me. On cfarm104.cfarm.net, I see the following: $ DYLD_PRINT_LIBRARIES=1 /opt/homebrew/bin/gcksum \ -a sha3 -l 256 /dev/null 2>&1 | grep -F crypto dyld[94829]: <A01A158D-6FE7-3B1C-A2C4-6BCB90D7314A> /usr/lib/system/libcorecrypto.dylib dyld[94829]: <F9685724-6622-3592-8336-B3811B583E83> /usr/lib/libcrypto.46.dylib dyld[94829]: move loaded to delayed: libcrypto.46.dylib But it looks like it is brought in from another dependency. Here is what I see when configuring: $ ./configure | grep -i openssl checking whether openssl is GPL compatible... no Which made me realize that LibreSSL was forked from OpenSSL 1.0, which doesn't have a license compatible with the GPL. I'll make the HomeBrew people aware of it, and let them decide if they want to add the OpenSSL dependency. Collin
