Re: [gentoo-dev] [PATCH] use.desc: Correct/clarify SSL/TLS-related flags

[Ulrich Mueller <ulm@gentoo.org>]

[-- Attachment #1: Type: text/plain, Size: 2984 bytes --]

>>>>> On Tue, 30 Jan 2018, Michał Górny wrote:

> Correct the description of SSL/TLS-related flags to match their modern
> use. USE=ssl is a feature flag that enables support for SSL/TLS,
> while USE=gnutls and USE=libressl are implementation toggling flags.

> Unify the descriptions a bit. Make sure to mention both SSL and TLS
> to avoid confusion. Inform about the necessity of enabling USE=ssl
> in both implementation flags, and replace 'might' with 'if present'.
> ---
>  profiles/use.desc | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)

> diff --git a/profiles/use.desc b/profiles/use.desc
> index 43423a017a5f..4ac5d5ad6136 100644
> --- a/profiles/use.desc
> +++ b/profiles/use.desc
> @@ -119,7 +119,7 @@ gmp - Add support for dev-libs/gmp (GNU MP library)
>  gnome - Add GNOME support
>  gnome-keyring - Enable support for storing passwords via gnome-keyring
>  gnuplot - Enable support for gnuplot (data and function plotting)
> -gnutls - Add support for net-libs/gnutls (TLS 1.0 and SSL 3.0 support)
> +gnutls - Prefer net-libs/gnutls as SSL/TLS provider (requires USE=ssl if present)

NACK. This seems to imply that USE="-ssl gnutls" is not a valid
configuration? What if the user prefers gnutls and therefore has
globally enabled the gnutls flag, but -ssl for a single package?

How about "(needs USE=ssl to take effect)" instead?

>  gphoto2 - Add digital camera support
>  gpm - Add support for sys-libs/gpm (Console-based mouse driver)
>  gps - Add support for Global Positioning System
> @@ -179,7 +179,7 @@ libcaca - Add support for colored ASCII-art graphics
>  libedit - Use the libedit library (replacement for readline)
>  libffi - Enable support for Foreign Function Interface library
>  libnotify - Enable desktop notification support
> -libressl - Use dev-libs/libressl as SSL provider (might need ssl USE flag), packages should not depend on this USE flag
> +libressl - Use dev-libs/libressl instead of dev-libs/openssl as SSL/TLS provider (requires USE=ssl if present), packages should not depend on this USE flag

Same here.

>  libsamplerate - Build with support for converting sample rates using libsamplerate
>  libwww - Add libwww support (General purpose WEB API)
>  lirc - Add support for lirc (Linux's Infra-Red Remote Control)
> @@ -319,7 +319,7 @@ sox - Add support for Sound eXchange (SoX)
>  speex - Add support for the speex audio codec (used for speech)
>  spell - Add dictionary support
>  sqlite - Add support for sqlite - embedded sql database
> -ssl - Add support for Secure Socket Layer connections
> +ssl - Add support for SSL/TLS connections (Secure Socket Layer / Transport Layer Security)
>  startup-notification - Enable application startup event feedback mechanism
>  static - !!do not set this during bootstrap!! Causes binaries to be statically linked instead of dynamically
>  static-libs - Build static versions of dynamic libraries as well
> -- 
> 2.16.1

[-- Attachment #2: Type: application/pgp-signature, Size: 490 bytes --]