On 24. 06. 22 11:27, Florian Weimer wrote:
* Felix Schwarz:

Are these Python 2.7 dependencies only used at build time? In that
case Fedora could maybe announce that openssl1.1 might not get the
full security suport so the burden for openssl1.1 packagers is lower
without removing the functionality?

I'm pretty sure it's used for Python's own HTTPS implementation, among
other things, so it's not really an optional feature (although Python
can be built without it, I believe).

It is possible to build Python 2 without the ssl module. HTTPS would indeed not work and hence pip would not work. In return, the package would be useless for Python developers using virtualenv to test their code that still needs to support Python 2.

If openssl1.1-devel goes away, we would likely need to either bundle openssl entirely (which is worse than having openssl1.1-devel in Fedora IMHO), or just bundle the headers somehow, which just creates a room for breakage with every openssl 1.1 update for no added benefit.

--
Miro Hrončok
--
Phone: +420777974800
IRC: mhroncok
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to