Clemens Lang
Clemens Lang
To expand on how CMake on macOS uses the SONAME — it will become part of the library's filename `libsomething.$SONAME.dylib`, and will also be referenced in the library's ID load...
While this seems to solve the FIPS concerns now, it does not provide crypto agility, so for the next transition that's coming up (use post-quantum safe cryptography), we'll end up...
This probably needs a rebase on top of #353 for CI to pass.
I see it as the last result. Is it missing for you?
@sandrobonazzola Done, sorry for the delay.
> They talked about doing it during the Fedora 38 Beta, but then rolled that change back before release with no further communication as to why. So no, there has...
What advantage does this approach have over recommending users to install certsync? One potential issue I see with this is that distrusting a CA now requires doing that in two...
> > What advantage does this approach have over recommending users to install certsync? > > CA bundle maintained by mozilla are updated more timely compared the system CA, the...
> I don't know much about the public CA thing, the only problem I encountered with an outdated CA bundle is the letsencrypt problem. https://trac.macports.org/wiki/ProblemHotlist#letsencrypt So I would prefer to...
Maybe we should hold off until 3.6.1 due to openssl/openssl#28752.