Project

General

Profile

Actions
Copy link

Bug #22888

closed

Use system openssl for relayd

Added by Alexis Mousset over 1 year ago. Updated over 1 year ago.

Status:
Released
Priority:
N/A
Assignee:
Benoît PECCATTE
Category:
Packaging
Target version:
8.0.0~alpha1
Pull Request:
https://github.com/Normation/rudder-p...
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
To do
Regression:
No

Description

Two years ago, for 7.0, we had to embed openssl in the relayd binary (using the vendored crate feature) due to bugs in openssl <1.1.1h that prevented our certificate validation to work.

We should now be able to move back as our support server OS for 8.0 have:

  • Debian 11 : 1.1.1n
  • Debian 12 : 3.0.9
  • Ubuntu 22.04 : 3.0.2
  • Ubuntu 24.04 : 3.0+
  • SLES 15 SP4 : 1.1.1k, 3.0 available
  • RHEL 8 : 1.1.1k
  • RHEL 9 : 3.0.7
  • AL 2023 : 3.0.8

This will be better for:

  • Traceability for users
  • Less maintenance for us

Subtasks 1 (0 open — 1 closed)

Bug #22889: Use system openssl for relayd - relaydReleasedBenoît PECCATTEActions
Actions
Copy link

Also available in: Atom PDF