Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(s2n-quic-crypto): remove ring #2332

Merged
merged 2 commits into from
Sep 25, 2024
Merged

Conversation

WesleyRosenblum
Copy link
Contributor

@WesleyRosenblum WesleyRosenblum commented Sep 25, 2024

Description of changes:

Since aws/aws-lc#1477 was addressed, aws-lc-rs can now build on Windows without requiring NASM to be installed. This was the last hurdle before removing our dependency on ring, so this PR does that.

Call-outs:

Including prebuilt-nasm as a feature makes it difficult to opt out of this functionality, so we may want to bump it up to an s2n-quic level feature in the future

Testing:

Builds in CI

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@@ -17,18 +17,13 @@ fips = ["aws-lc-rs/fips"]
testing = []

[dependencies]
aws-lc-rs = { version = "1.9", features = ["prebuilt-nasm"] }
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think we only want to enable this is our dev-dependencies? The problem with features is they are only additive and this would make it difficult for someone to opt out of this

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If its not on by default, wouldn't windows builds start breaking?

Could we add prebuilt-nasm as a default feature on s2n-quic, so customers can opt out by turning off default features?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah I guess this is part of the reason we haven't made the change. Well I guess today it's no worse than what windows environments get with ring... So let's move forward as-is and we can revisit the default-features = false route.

@WesleyRosenblum WesleyRosenblum marked this pull request as ready for review September 25, 2024 21:54
@WesleyRosenblum WesleyRosenblum merged commit c561869 into main Sep 25, 2024
130 of 132 checks passed
@WesleyRosenblum WesleyRosenblum deleted the WesleyRosenblum/noring branch September 25, 2024 21:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants