-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

Sorry for late response.

(2011/01/19 12:58), Eric Hodel wrote:
>>> - It's the only reason why rubygems depends on openssl *by default*,
>>> even if user doesn't want to use its feature. With removing 'cert'
>>> command, *some features of* rubygems gets openss free.
>>>
>>> Users who want to push gem still needs openssl. And users who adds
>>> 'https://rubygems.org/' like me needs openssl to scan the central
>>> repository.
>>>
>>> *For me*, it's more important that rubygems tries to require 'openssl'
>>> only when it's really needed, not by default. I know current rubygems
>>> doesn't depends on openssl. It works even if there's no openssl
>>> installed but this hidden dependency makes it harder for jruby to
>>> reduce startup time.
>>
>> i think i already did this in the rubygems repo, didn't i?
> 
> rubygems/security (thus rubygems/gem_openssl and openssl) are required only 
> from commands, rubygems/package and rubygems/builder.  None of these are 
> required by require 'rubygems':
> 
> $ ruby -Ilib -e 'require "rubygems"; p $".grep(/openssl/)'
> []
> 
> $ ruby -v -Ilib -e 'require "rubygems"; p $"'
> ruby 1.8.7 (2009-06-12 patchlevel 174) [universal-darwin10.0]
> ["enumerator.so", "rubygems/defaults.rb", "rbconfig.rb", "thread.bundle", 
> "thread.rb", "rubygems/exceptions.rb", "rubygems/custom_require.rb", 
> "rubygems.rb"]
> 
> $ ruby19 -v -Ilib -e 'require "rubygems"; p $"'
> ruby 1.9.3dev (2011-01-19 trunk 30599) [x86_64-darwin10.6.0]
> ["enumerator.so", 
> "/usr/local/lib/ruby/1.9.1/x86_64-darwin10.6.0/enc/encdb.bundle", 
> "/usr/local/lib/ruby/1.9.1/x86_64-darwin10.6.0/enc/trans/transdb.bundle", 
> "/Users/drbrain/Work/git/rubygems/lib/rubygems/defaults.rb", 
> "/usr/local/lib/ruby/1.9.1/x86_64-darwin10.6.0/rbconfig.rb", 
> "/usr/local/lib/ruby/1.9.1/thread.rb", 
> "/Users/drbrain/Work/git/rubygems/lib/rubygems/exceptions.rb", 
> "/Users/drbrain/Work/git/rubygems/lib/rubygems/custom_require.rb", 
> "/Users/drbrain/Work/git/rubygems/lib/rubygems.rb"]

I confirmed that rubygems 1.3.7 already does not have openssl
dependency. rubygems/security.rb is loaded only when install/update,
cert, and packaging. My claim was completely wrong. I'm very sorry for
bothering you.

Regards,
// NaHi
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (Cygwin)

iQEcBAEBAgAGBQJNN9BoAAoJEC7N6P3yLbI2bs0IAN3W2IEWfRM+h6q3V3VASo/+
T/c/GmjjVPNpOAJmRc+fBuCMVj27aB2nhyl7WHSCRoczxFwwKraU1MwSLLyEpvpj
r6SwKjDCOjXTOtRdFQFzFlQzIRLKC1dEOePG1J7Ww9BSq95F3S5zofJ+MxugQlMz
PrgkZVaE4DE9vTSFlnPxRpfSp700rh7+ex5iPLrtoGFq4fWYGdkCe39zEOArw2rq
Gnwt118FLmEXXch4kW0I1PeyGuyWiamCOtY+9joK105CH6dgbT8kSq2ofQm20grK
KyZbKFRLTSGpoA/7FoKJc17+IOl7rl5wFHMw9gjHH0XacngnRANiJp05ui0BPq4=
=/7Mx
-----END PGP SIGNATURE-----
_______________________________________________
Rubygems-developers mailing list
http://rubyforge.org/projects/rubygems
Rubygems-developers@rubyforge.org
http://rubyforge.org/mailman/listinfo/rubygems-developers

Reply via email to