mirror of
https://anongit.gentoo.org/git/repo/gentoo.git
synced 2025-12-13 21:47:44 +00:00
fb6a75fdecOpenSSL 3.2+ brings an initial RFC 9000 (QUIC) implementation that is sufficient for use as a client or for general experimentation and QUIC / HTTP/3 development. While 3.2 is sufficient, the API exposed by 3.3 is more mature; we'll only enable it from here so that client applications (e.g. net-misc/curl) can be wired up to test QUIC. This passes tests upstream and is reported to work, but Gentoo QUIC support is best described as 'developing'; hic sunt dracones. Signed-off-by: Matt Jolly <kangie@gentoo.org>
31 lines
1.6 KiB
XML
31 lines
1.6 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE pkgmetadata SYSTEM "https://www.gentoo.org/dtd/metadata.dtd">
|
|
<pkgmetadata>
|
|
<maintainer type="project">
|
|
<email>base-system@gentoo.org</email>
|
|
<name>Gentoo Base System</name>
|
|
</maintainer>
|
|
<use>
|
|
<flag name="bindist">Disable/Restrict EC algorithms (as they seem to be patented) -- note: changes the ABI</flag>
|
|
<flag name="fips">Enable FIPS provider</flag>
|
|
<flag name="ktls">Enable support for Kernel implementation of TLS (kTLS)</flag>
|
|
<flag name="quic">Enable support for QUIC (RFC 9000); a UDP-based protocol intended to replace TCP</flag>
|
|
<flag name="rfc3779">Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers)</flag>
|
|
<flag name="sslv2">Support for the old/insecure SSLv2 protocol -- note: not required for TLS/https</flag>
|
|
<flag name="sslv3">Support for the old/insecure SSLv3 protocol -- note: not required for TLS/https</flag>
|
|
<flag name="tls-compression">Enable support for discouraged TLS compression</flag>
|
|
<flag name="tls-heartbeat">Enable the Heartbeat Extension in TLS and DTLS</flag>
|
|
<flag name="weak-ssl-ciphers">Build support for SSL/TLS ciphers that are considered "weak"</flag>
|
|
</use>
|
|
<upstream>
|
|
<remote-id type="cpe">cpe:/a:openssl:openssl</remote-id>
|
|
<remote-id type="github">openssl/openssl</remote-id>
|
|
</upstream>
|
|
<slots>
|
|
<slot name="0">For building against. This is the only slot
|
|
that provides headers and command line tools.</slot>
|
|
<slot name="0.9.8">For binary compatibility, provides libcrypto.so.0.9.8
|
|
and libssl.so.0.9.8 only.</slot>
|
|
<subslots>Reflect ABI of libcrypto.so and libssl.so.</subslots>
|
|
</slots>
|
|
</pkgmetadata>
|