OpenSSL 1.0 removal

[fxcoudert]

OpenSSL 1.0 will reach EOL on 2019-12-31. Here are the few remaining formulas that depend on it, and need to be fixed (or removed). They are sorted by analytics (higher usage first):

• mysql-connector-c
• erlang@19 (needed by couchdb)
• rethinkdb
• freerdp
• thrift@0.9
• ruby@2.0
• erlang@17 (needed by riak)
• bulk_extractor
• nut
• ipmiutil
• freeswitch
• libcapn
• virtuoso
• pound

Edit: Sadly, we have added new formulas with OpenSSL 1.0 dependency (by mistake)

• awsume awsume 4.0.0 (new formula) #45270
• dvc dvc 0.63.4 (new formula) #45709
• manticoresearch manticoresearch 3.2.0 (new formula) #42026

[Bo98]

freeswitch won't be on that list for too long (#46367).

[fxcoudert]

libcapn

• The issue was reported, no answer given Build failure with OpenSSL 1.1.1c on macOS adobkin/libcapn#45
• No commit to repository since 2017

ipmiutil

• Find a way to make the newer versions work: ipmiutil 3.1.4 #43722

nut

• Upstream fixed it in master: Add support for openssl-1.1.0 networkupstools/nut#504

bulk_extractor

• Is using OpenSSL is a submodule, which has a fix in master, but it's a bit complicated to backport.
• Requested a new release New release does not support SSL 1.1 simsong/bulk_extractor#117

freerdp

• New release requested: Any plans to make new release? FreeRDP/FreeRDP#5608

rethinkdb

• Has OpenSSL 1.1 issues: rethinkdb/rethinkdb@62456155
• Has Boost >= 1.69 issues: rethinkdb/rethinkdb@04785087

virtuoso

• New release requested: virtuoso-opensource: build against openssl 1.1.0 openlink/virtuoso-opensource#583 (comment)

erlang@17 (needed by riak)

• erlang@17 is not maintained anymore, we should remove it
• it is needed by riak, which is an old version, because the build process is very fragile and several attempts to update it have failed: riak 2.2.6 #34129 riak 2.9.0 #40075 riak 2.9.0p1 #40281

[jnozsc]

ruby 2.0 is EOL for a while
https://www.ruby-lang.org/en/news/2016/02/24/support-plan-of-ruby-2-0-0-and-2-1/

[jnozsc]

https://github.com/Homebrew/homebrew-core/blob/master/Formula/ruby@2.0.rb

https://apple.stackexchange.com/questions/47664/what-is-apples-policy-for-supporting-security-updates-on-older-versions-of-os-x

https://apple.stackexchange.com/questions/257627/ruby-version-on-macos-sierra

it seems ruby@2.0 in homebrew-core is kept in order to support Mac OSX 10.12 or prior .
Mac OSX 10.13 has built-in ruby version 2.3.3

So if homebrew-core decide to stop support Mac OSX 10.12 or prior, it should be safe to remove it

[fxcoudert]

@Bo98 we need to migrate mysql-connector-c to its latest version (we ship a very old one). As far as I understand, the distribution of mysql-connector-c has changed, and is now part of the source package for mysql-client. Would you be able to help and provide a PR for updating mysql-connector-c? Many thanks in advance…

[Bo98]

I'll need to check what the actual differences are. You're right that I think it merged into mysql-client but I'm not sure why they were separate things to begin with. I'll try create something using mysql-connector-c and see if it's compatible with mysql-client.

We should definitely also offer mysql-client 8.0. I'm not sure why there's a comment saying to use 5.7 when a mysql-client@5.7 seems a viable option.

I'll get back to you shortly.

[Bo98]

Linking the relevant mysql-connector-c pull request here for reference: #46566

[efiop]

Hi guys!

Sorry for accidentally using 1.0 in dvc. Created #46829 to fix that.

Thanks for maintaining homebrew 🙏 !

[v-stickykeys]

Just curious. Why the removal?

[SMillerDev]

Because of the first sentence in the issue.