maskit commented on PR #13548: URL: https://github.com/apache/trafficserver/pull/13548#issuecomment-5612095474
Correcting the CI note above: CI does build against BoringSSL — `rocky` and `rocky-asan` both do, via `OPENSSL_ROOT_DIR=/opt/h3-tools-boringssl/boringssl`. The gap is narrower than I said. Those images pin BoringSSL `45b24641` (June 2024), which predates `SSL_CREDENTIAL_new_raw_public_key`, so `CMakeLists.txt` leaves `TS_USE_RPK` off and the fallback is compiled out rather than compiled and left untested. The fedora images pin a revision new enough for it, but the fedora jobs build against the system OpenSSL, so they take the OpenSSL path. Bumping the BoringSSL pin in the rocky images is therefore what brings this path into CI. The description now says this instead. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
