Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove openssl support for snap-serer #5973

Closed
wants to merge 2 commits into from
Closed

Remove openssl support for snap-serer #5973

wants to merge 2 commits into from

Conversation

erikd
Copy link
Contributor

@erikd erikd commented Sep 4, 2024

Description

OpenSSL support was only need by cardano-tracer and even then is only used when cardano-tracer is compiled with the rtview flag is True (by default False).

Checklist

  • Commit sequence broadly makes sense and commits have useful messages
  • New tests are added if needed and existing tests are updated. These may include:
    • golden tests
    • property tests
    • roundtrip tests
    • integration tests
      See Runnings tests for more details
  • Any changes are noted in the CHANGELOG.md for affected package
  • The version bounds in .cabal files are updated
  • CI passes. See note on CI. The following CI checks are required:
    • Code is linted with hlint. See .github/workflows/check-hlint.yml to get the hlint version
    • Code is formatted with stylish-haskell. See .github/workflows/stylish-haskell.yml to get the stylish-haskell version
    • Code builds on Linux, MacOS and Windows for ghc-8.10.7 and ghc-9.2.7
  • Self-reviewed the diff

Note on CI

If your PR is from a fork, the necessary CI jobs won't trigger automatically for security reasons.
You will need to get someone with write privileges. Please contact IOG node developers to do this
for you.

@erikd erikd requested review from a team as code owners September 4, 2024 01:12
Disable HsOpenSSL support for snap-server. HsOpenSSL already fails
to compile with GCC versons >= 14.2 and will like stop working all
together earlu in 2025:

    haskell-cryptography/HsOpenSSL#95
flags: +openssl
-- OpenSSL support requires HsOpenSSL which will cause problems in the near future
-- https://github.com/haskell-cryptography/HsOpenSSL/issues/95
flags: -openssl
Copy link
Contributor

@mgmeier mgmeier Sep 4, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unless snap-server remains somewhere in the node's dependency graph, this flag from now on only affects cardano-tracer. That, however, will need to account for a non-default, non-SSL build of its dependency within the application code.

Merging this flag change would break cardano-tracer currently, please remove and postpone.

Copy link
Contributor Author

@erikd erikd Sep 4, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This currently builds with this change.

The -openssl flag on enables SSL for cardano-tracer when cardano-tracer is built with the -rtview flag which is not on be default.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Flags -openssl and +rtview result in a broken service (i.e., unable to start up). Handling this case needs to be adjusted in the application code before any merge.

@mgmeier
Copy link
Contributor

mgmeier commented Sep 11, 2024

Closing this in favor of #5975 which will contain the same changes plus necessary application-side adjustements - removing the dependency on HsOpenSSL.

@mgmeier mgmeier closed this Sep 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants