Skip to content

[aws-c-cal] Remove OpenSSL dependency from Windows and macOS. #44996

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Apr 14, 2025

Conversation

teo-tsirpanis
Copy link
Contributor

  • Changes comply with the maintainer guide.
  • SHA512s are updated for each updated download.
  • The "supports" clause reflects platforms that may be fixed by this new version.
  • Any fixed CI baseline entries are removed from that file.
  • Any patches that are no longer applied are deleted from the port's directory.
  • The version database is fixed by rerunning ./vcpkg x-add-version --all and committing the result.
  • Only one version is added to each modified port's versions file.

Partially reverts #43559. Using system crypto libraries where available is better for security and results in compiling less code.

c.c. @fran6co

Comment on lines +10 to +12
if (NOT (VCPKG_TARGET_IS_WINDOWS OR VCPKG_TARGET_IS_OSX))
set(USE_OPENSSL ON)
endif()

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe consider adding a feature for using OpenSSL on those platforms since they can often be behind on algorithm support in system libs?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That was my initial idea actually, but on second thought I think we should add this feature only if someone asks for it. We should not enable poor security practices, and the only algorithm supported only by OpenSSL is Ed25519, which has no uses in public GitHub repos that are not bindings of aws-c-cal.

@LilyWangLL LilyWangLL self-assigned this Apr 14, 2025
@LilyWangLL LilyWangLL added the category:port-feature The issue is with a library, which is requesting new capabilities that didn’t exist label Apr 14, 2025
@LilyWangLL LilyWangLL added the info:reviewed Pull Request changes follow basic guidelines label Apr 14, 2025
@BillyONeal BillyONeal merged commit 043d415 into microsoft:master Apr 14, 2025
18 checks passed
@BillyONeal
Copy link
Member

Thanks!

@teo-tsirpanis teo-tsirpanis deleted the aws-c-cal-openssl branch April 14, 2025 20:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
category:port-feature The issue is with a library, which is requesting new capabilities that didn’t exist info:reviewed Pull Request changes follow basic guidelines
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants