-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Always use the openssl backend of curl #14351
Conversation
This should make sure that the openssl backend of curl is used, instead of the gnutls or nss backend, for consistency reasons. Signed-off-by: Saikrishna Arcot <[email protected]>
3efb603
to
a0d11a5
Compare
@@ -202,7 +202,7 @@ RUN apt-get update && apt-get install -y \ | |||
libxml2-dev \ | |||
# For BFN sdk build | |||
libusb-1.0-0-dev \ | |||
libcurl3-nss-dev \ | |||
libcurl4-openssl-dev \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can we change the one in sonic-slave-buster/Dockerfile.j2 as well? We are still using the docker image.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Done
Why I did it Change to use the default ssl lib openssl not nss Backport #14351. How I did it
@saiarcot895 PR conflicts with 202205 branch |
Why I did it This should make sure that the openssl backend of curl is used, instead of the gnutls or nss backend, for consistency reasons.
@saiarcot895 PR conflicts with 202211 branch |
Could you please clarify.
https://github.com/sonic-net/sonic-mgmt-framework/blob/d5e23d8bd64d8c186b88d8faa7d56cf90cabe5a9/CLI/klish/Makefile#L22 |
@k-v1 I think it would be better for feature/capability consistency (and some minor space savings) that everything uses the openssl version of curl, unless there's a very good reason that some other backend needs to be used. |
Why I did it This should make sure that the openssl backend of curl is used, instead of the gnutls or nss backend, for consistency reasons.
https://msazure.visualstudio.com/One/_workitems/edit/17813211 Related work items: sonic-net#9216, sonic-net#11437, sonic-net#13507, sonic-net#13512, sonic-net#13567, sonic-net#13972, sonic-net#14351, sonic-net#14371, sonic-net#14375, sonic-net#14401, sonic-net#14407, sonic-net#14408, sonic-net#14427, sonic-net#14428, sonic-net#14439
I filed sonic-net/sonic-mgmt-framework#130 to investigate changing it to openssl as well instead of gnutls. |
This should make sure that the openssl backend of curl is used, instead of the gnutls or nss backend, for consistency reasons.
Why I did it
How I did it
How to verify it
Which release branch to backport (provide reason below if selected)
Description for the changelog
Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.
Link to config_db schema for YANG module changes
A picture of a cute animal (not mandatory but encouraged)