Re: [jruby-dev] jruby-openssl, jruby 1.0.3, and rails 2.0.x

Nick Sieger wrote:
> On 12/11/07, Thomas E Enebo <tom.enebo-Re5JQEeQqe8AvxtiuMwx3w@xxxxxxxxxxxxxxxx> 
> wrote:
>   
> > Ok so I can put out a binary distro of 1.0.3 and in order for that to
> > be smooth I need to release an updated jruby-openssl.  Here is the
> > problem (for windows):
> >
> > 1. Rails 2 requires openssl
> > 2. JRuby 1.0.3 binary is compiled against Java 1.4 because that is
> > what we support
> > 3. jruby-openssl is only supported using Java 1.5
> >     
>
> For the record, now that I think about it, this may not be totally
> true. The 1.5 feature that is not in 1.4 that we rely on is
> javax.net.ssl.SSLEngine. If we compile a 1.4-compatible jar and the
> program never uses https -- maybe it will work?
>
>   
> > 4. jruby 1.0.3 binary will not run Rails 2
> > 5. lack of profit!
> >
> > So questions:
> > 1. Would a 1.4 and 1.5 binary for 1.0.3 work?  For people who want to
> > do Rails in 1.4 envs this sort of sucks.  Plus it may not be too clear
> > what the issue is.
> > 2. Is there any ways of making jruby-openssl work with Java 1.4?  I
> > believe there are 1.4 BC jars?
> > 3. Can we eliminate jruby-openssl as a req for Rails 2?  Like monkey
> > patching in at least one place?
> >     
>
> So, the only place that uses openssl in Rails 2 is the new cookie
> store, which unfortunately is the default. So we'd need to have a
> patched copy of Rails which does not use the cookie store. The only
> classes it uses are OpenSSL::HMAC and OpenSSL::Digest.
>
>   
> > I really hate the idea of not being able to support Rails 2 on
> > windows.  It is even possible another part of Rails will slurp in
> > jruby-openssl and this will be an issue for more than just Windows.
> >     
>
> So here's a new idea. openssl really sucks for us because it's such a
> monolithic beast.
>
> What if all 'require "openssl"' did on JRuby was load a ruby file that
> contained a bunch of autoloads for all the constants in openssl? We
> could attempt to fill in as many as possible in the base JRuby
> distribution, and only supply the current error ("please install
> jruby-openssl") for the ones that we need it.
>   
No way. Please. It's going to be hell on earth. Or worse. =)

--
Ola Bini (http://ola-bini.blogspot.com) 
JRuby Core Developer
Developer, ThoughtWorks Studios (http://studios.thoughtworks.com)
Practical JRuby on Rails (http://apress.com/book/view/9781590598818)

"Yields falsehood when quined" yields falsehood when quined.



---------------------------------------------------------------------
To unsubscribe from this list please visit:

   http://xircles.codehaus.org/manage_email