On Thu, Sep 08, 2016 at 01:27:54PM -0400, Stephen Gallagher wrote:
> * Node.js 4.x and 6.x both *strictly* require functionality from
OpenSSL 1.0.2
> and cannot run (or indeed build) against OpenSSL 1.0.1. Currently, both EPEL 6
> and EPEL 7 have 1.0.1 in their buildroots. I am not aware of any solution (SCL
> or otherwise) for linking EPEL to a newer version of OpenSSL.
Have you got details on what exactly is required from 1.0.2? Is it ALPN
support?
I strongly suspect it will be possible (with sufficient effort) to patch
node to build against older OpenSSL, albeit at the cost of losing some
features.
There is a trade-off here between disabling 1.0.2 features & waiting for
RHEL OpenSSL to catch up, versus having to maintain & patch a copy of
OpenSSL 1.0.2 in addition to the RHEL OpenSSL. i.e. someone is ready to
deal with patching all future Critical security issues in a bundled
OpenSSL.
Regards, Joe
--
Joe Orton // Red Hat Core Services