Skip to content

Conversation

@cjpatton
Copy link
Collaborator

When set, these features cause boring-sys to apply patches to the source before building BoringSSL. Instead, apply these patches unconditionally. This matches the semantcis of pre-compiled BoringSSL, where the library is expected to provide the features implemented by these patches.

We might want to do the same for "rpk", but currenlty our internal build of boringSSL doesn't appear to supply the following APIs:

ffi::SSL_CTX_set_nullchain_and_key
ffi::SSL_CTX_set_server_raw_public_key_certificate

@cjpatton cjpatton added the v5 label Sep 29, 2025
@cjpatton cjpatton marked this pull request as ready for review September 30, 2025 00:25
@cjpatton
Copy link
Collaborator Author

Note: The CI failure appears to be due to an unrelated issue: #392

@bwesterb bwesterb mentioned this pull request Sep 30, 2025
@cjpatton cjpatton force-pushed the cjpatton/drop-pq-experimental branch from 9f00d5c to 379450a Compare September 30, 2025 14:32
When set, these features cause boring-sys to apply patches to the source
before building BoringSSL. Instead, apply these patches unconditionally.
This matches the semantcis of pre-compiled BoringSSL, where the library
is expected to provide the features implemented by these patches.

We might want to do the same for "rpk", but currenlty our internal build
of boringSSL doesn't appear to supply the following APIs:

```
ffi::SSL_CTX_set_nullchain_and_key
ffi::SSL_CTX_set_server_raw_public_key_certificate
```
@cjpatton cjpatton force-pushed the cjpatton/drop-pq-experimental branch from 379450a to bfdee23 Compare September 30, 2025 15:18
@cjpatton
Copy link
Collaborator Author

Per offline discussion with @ghedo: We're not in a position right now internally to ensure that every build of boringSSL in use implements the same feature set. Dropping the "underscore-wildcards" in particular would cause some grief.

@cjpatton cjpatton closed this Sep 30, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant