From nobody Thu Aug 31 19:14:13 2023 X-Original-To: python@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Rc9nd4HsVz4rVv4 for ; Thu, 31 Aug 2023 19:14:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Rc9nd0c6kz4cb2 for ; Thu, 31 Aug 2023 19:14:13 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1693509253; a=rsa-sha256; cv=none; b=gKui/XcWgUzWjJJyLgO3nNQzrNgCunrqrGp8nH8MBdyqLyvDYBknx5Ir7A6v8PBNKjyXJR c8gs1oHHrofHocXUiZZcnBjNck7S4fpHEVizoHBOqWakrIPOWesaAZOXVSRG9ZTNByBCFy JwODp4sUoX04YE5zfTlMRfPidKd15uqtITjL1SSnpRN8X+o8mIo2gbG5jGQG2X4WkropMa 1YJGo7o6PDDE8O1btWXVzRL+M4ndYEwxREBuHVLpi4omAU8HgHNV0xKgVJ8Dx4HtAPVu0c +VxCCjqaf3voktPXXfzDw22lwz2rjhJZXwIFLM92U+WAwlaNNp7uduYSS8KuiQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1693509253; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=sYUxY0NReb9Z9kDLlIzL9zKR82iL6tafcKTztbfwQcE=; b=JK4WIwUliiCL1qxXIvwffF58VtV+noG6SwnP+xnmO3Hg9keKtLBhXiyVyCHeEhK9PyK9Wo S/daG3gi4OLfmGmvCt4i6aqfexyeXGntMgPUvYisc5WUnqb7X4rP1CLKaKIPKm+GyvPVfj Wv35uqjP/VRZW9jObYKmHmsW1lmOHV0CdQkdgcAPYVbsU04Itwd8nL3zuyuykTBXL6bGt6 h5kveU0Vwn+FH7YgiY/F8kF8nAw2VniP3ykNXSnIcF4JC1q1GF5IIjg0EHOkKzl5cQ2X9l tIxo21jE9d90LJQ6vW7/cDAOZ1e+h+ms3cQQWHzHeXKM5k/HWZRZJaWRh3XB8Q== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4Rc9nc6phqzWPK for ; Thu, 31 Aug 2023 19:14:12 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 37VJEC9o083490 for ; Thu, 31 Aug 2023 19:14:12 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 37VJECMA083489 for python@FreeBSD.org; Thu, 31 Aug 2023 19:14:12 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: python@FreeBSD.org Subject: [Bug 266680] security/py-openssl: Update to 23.2.0 Date: Thu, 31 Aug 2023 19:14:13 +0000 X-Bugzilla-Reason: CC X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Ports & Packages X-Bugzilla-Component: Individual Port(s) X-Bugzilla-Version: Latest X-Bugzilla-Keywords: needs-qa X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: vishwin@freebsd.org X-Bugzilla-Status: Closed X-Bugzilla-Resolution: FIXED X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: lwhsu@FreeBSD.org X-Bugzilla-Flags: maintainer-feedback+ X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: FreeBSD-specific Python issues List-Archive: https://lists.freebsd.org/archives/freebsd-python List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-python@freebsd.org X-BeenThere: freebsd-python@freebsd.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D266680 --- Comment #22 from Charlie Li --- (In reply to Li-Wen Hsu from comment #16) Anyone who sets legacy for the cryptography DEFAULT_VERSIONS is a consumer. While not visible on say FreshPorts or anything that tracks the default DEFAULT_VERSIONS, you still have to account for those cases. A separate PyOpenSSL-legacy port is not feasible or in users' best interest= in any case, since it would involve not only a new port, but possibly even an additional DEFAULT_VERSIONS knob. Such would only cause more confusion for users, who should not need to closely track cryptography and PyOpenSSL's development, to figure out which combination works with what. There is no A= PI compatibility guarantee between different versions of the two packages, and because the two packages do not sync development or releases between themselves, some contention in this area has and will continue to happen. H= ence why the best approach is to provide both 21.0.0 and whatever the current version is/becomes in the same port, gated on the DEFAULT_VERSIONS setting. --=20 You are receiving this mail because: You are on the CC list for the bug.=