5 ms·

Good news: They ship PHP 7.2 Bad news: ...without ext/sodium That's a frankly irresponsible decision for Red Hat to make.

beefhash 7y ago
Is it perhaps in a separate package, at least?
- CiPHPerCoder 7y ago
  No. https://twitter.com/fkooman/status/1125767993764536321 https://twitter.com/fkooman/status/1125767993764536321
  - eclipseo76 7y ago
    In EPEL probably https://twitter.com/RemiCollet/status/1063323527770750976 https://twitter.com/RemiCollet/status/1063323527770750976
    - X-Istence 7y ago
      The enterprises I've worked where we've used RHEL... epel is not allowed near a system, only officially sanctioned repos and updates.
      - justinclift 7y ago
        Isn't EPEL the "officially sanctioned" third party repo?
        X-Istence 7y ago
        No, it's maintained by a special interest group within Fedora: Extra Packages for Enterprise Linux (or EPEL) is a Fedora Special Interest Group that creates, maintains, and manages a high quality set of additional packages for Enterprise Linux, including, but not limited to, Red Hat Enterprise Linux (RHEL), CentOS and Scientific Linux (SL), Oracle Linux (OL). EPEL packages are usually based on their Fedora counterparts and will never conflict with or replace packages in the base Enterprise Linux distributions. EPEL uses much of the same infrastructure as Fedora, including buildsystem, bugzilla instance, updates manager, mirror manager and more.
        justinclift 7y ago
        Ahhh. More "blessed" than "officially sanctioned" then. :)
wbl 7y ago
Red Hat has a long history of harming cryptography.
- Conan_Kudo 7y ago
  That's not fair. If you want to blame something for that, blame software patents. Some stuff used to be a huge minefield because of that.
Conan_Kudo 7y ago
> That's a frankly irresponsible decision for Red Hat to make. You say that without knowing anything at all about the situation? If you're a Red Hat customer, you could file a support ticket to get it pulled back in. Historically speaking, Red Hat is rather conservative about the number of crypto libraries they pull into their system because of the requirement to validate the system for certifications. But if there are legitimate requirements to have it included and managed by the base system, then usually they'll work to fix this if they are informed that it's needed. Again, if no one has officially requested it, then why would they pull it in? It can also help to file bugs on RHEL 8 in the Red Hat Bugzilla: https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%208 https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%...
- CiPHPerCoder 7y ago
  > If you're a Red Hat customer, you could file a support ticket to get it pulled back in. I have never spent $1 of my own money on Red Hat. After seeing this, I never will.
  - Conan_Kudo 7y ago
    You could also file a bug report in Red Hat Bugzilla even as a non-customer. But clearly you think that Red Hat is being malicious about this, which is definitely not the case.
  - Conan_Kudo 7y ago
    Just so you know, there's a bug report requesting this extension to be enabled and shipped: https://bugzilla.redhat.com/show_bug.cgi?id=1714591 https://bugzilla.redhat.com/show_bug.cgi?id=1714591

beefhash 7y ago

Is it perhaps in a separate package, at least?

CiPHPerCoder 7y ago
No. https://twitter.com/fkooman/status/1125767993764536321 https://twitter.com/fkooman/status/1125767993764536321
- eclipseo76 7y ago
  In EPEL probably https://twitter.com/RemiCollet/status/1063323527770750976 https://twitter.com/RemiCollet/status/1063323527770750976
  - X-Istence 7y ago
    The enterprises I've worked where we've used RHEL... epel is not allowed near a system, only officially sanctioned repos and updates.
    - justinclift 7y ago
      Isn't EPEL the "officially sanctioned" third party repo?
      - X-Istence 7y ago
        No, it's maintained by a special interest group within Fedora: Extra Packages for Enterprise Linux (or EPEL) is a Fedora Special Interest Group that creates, maintains, and manages a high quality set of additional packages for Enterprise Linux, including, but not limited to, Red Hat Enterprise Linux (RHEL), CentOS and Scientific Linux (SL), Oracle Linux (OL). EPEL packages are usually based on their Fedora counterparts and will never conflict with or replace packages in the base Enterprise Linux distributions. EPEL uses much of the same infrastructure as Fedora, including buildsystem, bugzilla instance, updates manager, mirror manager and more.
        justinclift 7y ago
        Ahhh. More "blessed" than "officially sanctioned" then. :)

wbl 7y ago

Red Hat has a long history of harming cryptography.

Conan_Kudo 7y ago
That's not fair. If you want to blame something for that, blame software patents. Some stuff used to be a huge minefield because of that.

Conan_Kudo 7y ago

> That's a frankly irresponsible decision for Red Hat to make. You say that without knowing anything at all about the situation? If you're a Red Hat customer, you could file a support ticket to get it pulled back in. Historically speaking, Red Hat is rather conservative about the number of crypto libraries they pull into their system because of the requirement to validate the system for certifications. But if there are legitimate requirements to have it included and managed by the base system, then usually they'll work to fix this if they are informed that it's needed. Again, if no one has officially requested it, then why would they pull it in? It can also help to file bugs on RHEL 8 in the Red Hat Bugzilla: https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%20Enterprise%20Linux%208 https://bugzilla.redhat.com/enter_bug.cgi?product=Red%20Hat%...

CiPHPerCoder 7y ago
> If you're a Red Hat customer, you could file a support ticket to get it pulled back in. I have never spent $1 of my own money on Red Hat. After seeing this, I never will.
- Conan_Kudo 7y ago
  You could also file a bug report in Red Hat Bugzilla even as a non-customer. But clearly you think that Red Hat is being malicious about this, which is definitely not the case.
- Conan_Kudo 7y ago
  Just so you know, there's a bug report requesting this extension to be enabled and shipped: https://bugzilla.redhat.com/show_bug.cgi?id=1714591 https://bugzilla.redhat.com/show_bug.cgi?id=1714591