-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi,
Sorry for late response. (2011/01/19 12:58), Eric Hodel wrote: >>> - It's the only reason why rubygems depends on openssl *by default*, >>> even if user doesn't want to use its feature. With removing 'cert' >>> command, *some features of* rubygems gets openss free. >>> >>> Users who want to push gem still needs openssl. And users who adds >>> 'https://rubygems.org/' like me needs openssl to scan the central >>> repository. >>> >>> *For me*, it's more important that rubygems tries to require 'openssl' >>> only when it's really needed, not by default. I know current rubygems >>> doesn't depends on openssl. It works even if there's no openssl >>> installed but this hidden dependency makes it harder for jruby to >>> reduce startup time. >> >> i think i already did this in the rubygems repo, didn't i? > > rubygems/security (thus rubygems/gem_openssl and openssl) are required only > from commands, rubygems/package and rubygems/builder. None of these are > required by require 'rubygems': > > $ ruby -Ilib -e 'require "rubygems"; p $".grep(/openssl/)' > [] > > $ ruby -v -Ilib -e 'require "rubygems"; p $"' > ruby 1.8.7 (2009-06-12 patchlevel 174) [universal-darwin10.0] > ["enumerator.so", "rubygems/defaults.rb", "rbconfig.rb", "thread.bundle", > "thread.rb", "rubygems/exceptions.rb", "rubygems/custom_require.rb", > "rubygems.rb"] > > $ ruby19 -v -Ilib -e 'require "rubygems"; p $"' > ruby 1.9.3dev (2011-01-19 trunk 30599) [x86_64-darwin10.6.0] > ["enumerator.so", > "/usr/local/lib/ruby/1.9.1/x86_64-darwin10.6.0/enc/encdb.bundle", > "/usr/local/lib/ruby/1.9.1/x86_64-darwin10.6.0/enc/trans/transdb.bundle", > "/Users/drbrain/Work/git/rubygems/lib/rubygems/defaults.rb", > "/usr/local/lib/ruby/1.9.1/x86_64-darwin10.6.0/rbconfig.rb", > "/usr/local/lib/ruby/1.9.1/thread.rb", > "/Users/drbrain/Work/git/rubygems/lib/rubygems/exceptions.rb", > "/Users/drbrain/Work/git/rubygems/lib/rubygems/custom_require.rb", > "/Users/drbrain/Work/git/rubygems/lib/rubygems.rb"] I confirmed that rubygems 1.3.7 already does not have openssl dependency. rubygems/security.rb is loaded only when install/update, cert, and packaging. My claim was completely wrong. I'm very sorry for bothering you. Regards, // NaHi -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Cygwin) iQEcBAEBAgAGBQJNN9BoAAoJEC7N6P3yLbI2bs0IAN3W2IEWfRM+h6q3V3VASo/+ T/c/GmjjVPNpOAJmRc+fBuCMVj27aB2nhyl7WHSCRoczxFwwKraU1MwSLLyEpvpj r6SwKjDCOjXTOtRdFQFzFlQzIRLKC1dEOePG1J7Ww9BSq95F3S5zofJ+MxugQlMz PrgkZVaE4DE9vTSFlnPxRpfSp700rh7+ex5iPLrtoGFq4fWYGdkCe39zEOArw2rq Gnwt118FLmEXXch4kW0I1PeyGuyWiamCOtY+9joK105CH6dgbT8kSq2ofQm20grK KyZbKFRLTSGpoA/7FoKJc17+IOl7rl5wFHMw9gjHH0XacngnRANiJp05ui0BPq4= =/7Mx -----END PGP SIGNATURE----- _______________________________________________ Rubygems-developers mailing list http://rubyforge.org/projects/rubygems Rubygems-developers@rubyforge.org http://rubyforge.org/mailman/listinfo/rubygems-developers