<div dir="ltr">The only one of all those that matters (to me) is <span style="font-family:Calibri,sans-serif;font-size:15px">OPENSSL_NO_SSL_INTERN since that provides a way to anticipate the effects of this API change. I'm fine with it going, but it needs a specified replacement (even if the replacement is we'll do that by default). Currently for example Qt won't build with </span><span style="font-family:Calibri,sans-serif;font-size:15px">OPENSSL_NO_SSL_INTERN defined since there are fields used for NPN that we need (iirc).</span><div><span style="font-family:Calibri,sans-serif;font-size:15px"><br></span></div><div><span style="font-family:Calibri,sans-serif;font-size:15px">Cheers</span></div><div><span style="font-family:Calibri,sans-serif;font-size:15px"><br></span></div><div><span style="font-family:Calibri,sans-serif;font-size:15px">Rich.</span></div><div><span style="font-family:Calibri,sans-serif;font-size:15px"><br></span></div></div><div class="gmail_extra"><br><div class="gmail_quote">On 23 January 2015 at 19:11, Salz, Rich <span dir="ltr"><<a href="mailto:rsalz@akamai.com" target="_blank">rsalz@akamai.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple">
<div>
<p class="MsoNormal">Looking at just OPENSSL_NO_xxx, we have over 100 openssl #ifdef options and we are considering removing nearly a third of them. Please reply soon if the following plan would cause problems. This will happen only in master, for post-1.0.2.<u></u><u></u></p>
<p class="MsoNormal"><u></u><u></u></p>
<p class="MsoNormal">We will remove the following options. You could argue that the OPENSSL_NO_SHAxxx options be treated as crypto, but OpenSSL does not compile without SHA and SHA1 defined, and we have no interest in spending the time to fix it. So for consistency,
we will remove all of them.<u></u><u></u></p>
<p class="MsoNormal"> GENUINE_DSA (and the broken DSS0 since SHA0 will be removed)<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_BIO<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_BUFFER<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_BUF_FREELISTS<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_CHAIN_VERIFY<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_DESCBCM (also removing the code; no EVP support)<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_EVP<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_FIPS_ERR<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_HASH_COMP<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_LHASH<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_LOCKING<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_MULTIBYTE (also removing the code)<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_OBJECT<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_RFC3779<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SHA<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SHA0 (also removing the code for SHA0)<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SHA1<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SHA224<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SHA256<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SHA384<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SHA512<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SPEED<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_SSL_INTERN (first attempt at making things opaque)<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_STACK<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_STORE<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_TLS<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_TLS1<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_TLS1_2_CLIENT<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_TLSEXT<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_X509<u></u><u></u></p>
<p class="MsoNormal"> OPENSSL_NO_X509_VERIFY<span class="HOEnZb"><font color="#888888"><u></u><u></u></font></span></p><span class="HOEnZb"><font color="#888888">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">-- <u></u><u></u></p>
<p class="MsoNormal">Principal Security Engineer, Akamai Technologies<u></u><u></u></p>
<p class="MsoNormal">IM: <a href="mailto:rsalz@jabber.me" target="_blank">rsalz@jabber.me</a> Twitter: RichSalz<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
</font></span></div>
</div>
<br>_______________________________________________<br>
openssl-dev mailing list<br>
To unsubscribe: <a href="https://mta.openssl.org/mailman/listinfo/openssl-dev" target="_blank">https://mta.openssl.org/mailman/listinfo/openssl-dev</a><br>
<br></blockquote></div><br></div>