USE=ssl should be used to enable the support of _any_ ssl implementation (gnutls, openssl, nss), whereas to select specifically openssl we should switch to USE=openssl instead.
Just see how it is done in the ~7.21.7-r2 as I did it there +- correctly. The goal is that external packages can depend on ssl and they dont need to care about whatever implementation the user decide to rely upon.
So how do we proceed? The Warning approach or the USE_EXPAND?
I would say do it again the same way as it was done in 7.21.7-r2.
(In reply to comment #3) > I would say do it again the same way as it was done in 7.21.7-r2. From the simple DEP site this is right. BUt we were discussing about the USE blocking. Should we allow USE="gnutls nss"? This would lead to a situation where the user does not know what is really used. Should we only warn, or make it completely transparent, by setting up up something like CURL_SSL_BACKEND USE_EXPAND?
(In reply to comment #4) > (In reply to comment #3) > > I would say do it again the same way as it was done in 7.21.7-r2. > > From the simple DEP site this is right. BUt we were discussing about the USE > blocking. Should we allow USE="gnutls nss"? This would lead to a situation > where the user does not know what is really used. > Should we only warn, or make it completely transparent, by setting up up > something like CURL_SSL_BACKEND USE_EXPAND? I am going to replicate what was in 7.21.7-r2 and add a warning if there is ambiguity regarding choice. This will go out in 7.25 forward. Aside: My preference would have been to add an openssl flag and do something like ssl? ( gntuls? (...) nss? (...) openssl? (...) ) but I've been told that this has been discussed and shot down.
Okay commited in curl-7.25.0.
Okay, a more symmetric and flexible way of doing this is with USE_EXPAND. This will be in 7.25.0-r1 which is currently being developed on my overlay: http://git.overlays.gentoo.org/gitweb/?p=dev/blueness.git;a=blob;f=net-misc/curl/curl-7.25.0-r1.ebuild;h=d6985b91c2458c364300d04988b6980c3d949f11;hb=1e769551a873d63377b8b4399a101eeacebd7997 The USE_EXPAND flag is in the tree: profile/desc/curl_ssl.desc. USE="ssl" will mean that you must enable one and exactly one of CURL_SSL="gnutls" or "nss" or "openssl".
