On Thu, Sep 08, 2016 at 01:27:54PM -0400, Stephen Gallagher wrote:
> > * Node.js 4.x and 6.x both *strictly* require functionality from OpenSSL 
> > 1.0.2
> > and cannot run (or indeed build) against OpenSSL 1.0.1. Currently, both 
> > EPEL 6
> > and EPEL 7 have 1.0.1 in their buildroots. I am not aware of any solution 
> > (SCL
> > or otherwise) for linking EPEL to a newer version of OpenSSL.

Have you got details on what exactly is required from 1.0.2?  Is it ALPN 
support?

I strongly suspect it will be possible (with sufficient effort) to patch 
node to build against older OpenSSL, albeit at the cost of losing some 
features.  

There is a trade-off here between disabling 1.0.2 features & waiting for 
RHEL OpenSSL to catch up, versus having to maintain & patch a copy of 
OpenSSL 1.0.2 in addition to the RHEL OpenSSL.  i.e. someone is ready to 
deal with patching all future Critical security issues in a bundled 
OpenSSL.

Regards, Joe

-- 
Joe Orton // Red Hat Core Services
_______________________________________________
epel-devel mailing list
[email protected]
https://lists.fedoraproject.org/admin/lists/[email protected]

Reply via email to