Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Always use the openssl backend of curl #14351

Merged
merged 2 commits into from
Mar 28, 2023
Merged

Conversation

saiarcot895
Copy link
Contributor

@saiarcot895 saiarcot895 commented Mar 20, 2023

This should make sure that the openssl backend of curl is used, instead of the gnutls or nss backend, for consistency reasons.

Why I did it

How I did it

How to verify it

Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006
  • 202012
  • 202106
  • 202111
  • 202205
  • 202211

Description for the changelog

Ensure to add label/tag for the feature raised. example - PR#2174 under sonic-utilities repo. where, Generic Config and Update feature has been labelled as GCU.

Link to config_db schema for YANG module changes

A picture of a cute animal (not mandatory but encouraged)

This should make sure that the openssl backend of curl is used, instead
of the gnutls or nss backend, for consistency reasons.

Signed-off-by: Saikrishna Arcot <sarcot@microsoft.com>
@@ -202,7 +202,7 @@ RUN apt-get update && apt-get install -y \
libxml2-dev \
# For BFN sdk build
libusb-1.0-0-dev \
libcurl3-nss-dev \
libcurl4-openssl-dev \
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we change the one in sonic-slave-buster/Dockerfile.j2 as well? We are still using the docker image.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

@xumia xumia merged commit 9726ec8 into sonic-net:master Mar 28, 2023
xumia added a commit that referenced this pull request Mar 28, 2023
Why I did it
Change to use the default ssl lib openssl not nss
Backport #14351.

How I did it
@saiarcot895 saiarcot895 deleted the curl-openssl branch March 29, 2023 18:43
@mssonicbld
Copy link
Collaborator

@saiarcot895 PR conflicts with 202205 branch

saiarcot895 added a commit to saiarcot895/sonic-buildimage that referenced this pull request Apr 5, 2023
Why I did it
This should make sure that the openssl backend of curl is used, instead of the gnutls or nss backend, for consistency reasons.
yxieca pushed a commit that referenced this pull request Apr 18, 2023
Why I did it
This should make sure that the openssl backend of curl is used, instead of the gnutls or nss backend, for consistency reasons.
@mssonicbld
Copy link
Collaborator

@saiarcot895 PR conflicts with 202211 branch

@k-v1
Copy link
Contributor

k-v1 commented Apr 26, 2023

@saiarcot895

Could you please clarify.
Is it correct if we are still using libcurl3-gnutls in some containers?

apt-get install -y g++ python3-dev libxml2 libcurl3-gnutls libcjson-dev

https://github.com/sonic-net/sonic-mgmt-framework/blob/d5e23d8bd64d8c186b88d8faa7d56cf90cabe5a9/CLI/klish/Makefile#L22

@saiarcot895
Copy link
Contributor Author

@k-v1 I think it would be better for feature/capability consistency (and some minor space savings) that everything uses the openssl version of curl, unless there's a very good reason that some other backend needs to be used.

saiarcot895 added a commit to saiarcot895/sonic-buildimage that referenced this pull request May 5, 2023
Why I did it
This should make sure that the openssl backend of curl is used, instead of the gnutls or nss backend, for consistency reasons.
@bluecmd
Copy link
Contributor

bluecmd commented Feb 20, 2024

I filed sonic-net/sonic-mgmt-framework#130 to investigate changing it to openssl as well instead of gnutls.

bluecmd added a commit to kamelnetworks/sonic-buildimage that referenced this pull request Mar 3, 2024
bluecmd added a commit to kamelnetworks/sonic-buildimage that referenced this pull request Mar 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants