OpenSSL now lives in SFW
Today I integrated the changes necessary for the move of OpenSSL from the Operating System/Networking (ON) consolidation to the Solaris FreeWare (SFW) consolidation. The old source still lives in ON as incorporates a special static build of OpenSSL. There are plans to remove this old copy but there may be complications.
The move was done for a variety of reasons:
- Simplifies upgrade
- Simplifies maintenance
- Allows compiler freedom
- FIPS container
For the moment there shouldn't be any real difference for users of Nevada/OpenSolaris. The same bits are delivered in the same packages just the build and delivery mechanism have changed.
I've got a couple of other things planned for the near future - OpenSSL upgrade 0.9.8k, move to isaexec'ed OpenSSL/SunSSH, etc but thats for another blog entry.
Great move ! :)
Posted by Sriram Narayanan on May 28, 2009 at 03:23 PM CDT #
Just installed b117, which says it contains this putback, but the SUNWopensslr package still puts the libs in /lib. I thought they were moving to /usr/sfw/lib?
Posted by Eric Sproul on June 25, 2009 at 03:46 PM CDT #
Eric:
OpenSSL moved from /usr/sfw to /usr and / back in build 104. You can see the PSARC case here: http://arc.opensolaris.org/caselog/PSARC/2006/555/. The putback log here: http://mail.opensolaris.org/pipermail/onnv-notify/2008-November/007963.html.
What makes this a little confusing is that I then moved OpenSSL to the SFW /consolidation/ in build 117. The delivered bits didn't change location but the source did. It is generally seen now that keeping things separated out in /usr/sfw was a mistake.
Posted by Mark Phalan on August 07, 2009 at 07:32 AM CDT #