{"action":"created","issue":{"url":"https://api.github.com/repos/Homebrew/brew/issues/597","repository_url":"https://api.github.com/repos/Homebrew/brew","labels_url":"https://api.github.com/repos/Homebrew/brew/issues/597/labels{/name}","comments_url":"https://api.github.com/repos/Homebrew/brew/issues/597/comments","events_url":"https://api.github.com/repos/Homebrew/brew/issues/597/events","html_url":"https://github.com/Homebrew/brew/pull/597","id":167954893,"number":597,"title":"link: don't link openssl.","user":{"login":"MikeMcQuaid","id":125011,"avatar_url":"https://avatars.githubusercontent.com/u/125011?v=3","gravatar_id":"","url":"https://api.github.com/users/MikeMcQuaid","html_url":"https://github.com/MikeMcQuaid","followers_url":"https://api.github.com/users/MikeMcQuaid/followers","following_url":"https://api.github.com/users/MikeMcQuaid/following{/other_user}","gists_url":"https://api.github.com/users/MikeMcQuaid/gists{/gist_id}","starred_url":"https://api.github.com/users/MikeMcQuaid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MikeMcQuaid/subscriptions","organizations_url":"https://api.github.com/users/MikeMcQuaid/orgs","repos_url":"https://api.github.com/users/MikeMcQuaid/repos","events_url":"https://api.github.com/users/MikeMcQuaid/events{/privacy}","received_events_url":"https://api.github.com/users/MikeMcQuaid/received_events","type":"User","site_admin":true},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":11,"created_at":"2016-07-27T20:58:13Z","updated_at":"2016-07-30T13:53:50Z","closed_at":"2016-07-29T23:00:52Z","pull_request":{"url":"https://api.github.com/repos/Homebrew/brew/pulls/597","html_url":"https://github.com/Homebrew/brew/pull/597","diff_url":"https://github.com/Homebrew/brew/pull/597.diff","patch_url":"https://github.com/Homebrew/brew/pull/597.patch"},"body":"- [x] Have you followed the guidelines in our [Contributing](https://github.com/Homebrew/brew/blob/master/.github/CONTRIBUTING.md) document?\r\n- [x] Have you checked to ensure there aren't other open [Pull Requests](https://github.com/Homebrew/brew/pulls) for the same change?\r\n- [x] Have you added an explanation of what your changes do and why you'd like us to include them?\r\n- [x] Have you successfully run `brew tests` with your changes locally?\r\n\r\n-----\r\n\r\nSee https://gist.github.com/tdsmith/4b502c5cc6e7d358acdf for reproduction instructions of the security hole this creates. Unfortunately this is recommended in locations like https://www.microsoft.com/net/core#macos (which provide no specific contact information) that we will unfortunately break but there's not really any other way around. This will scale better than the current system of \"Homebrew maintainers notice sites recommend this and ask them to not do so\"."},"comment":{"url":"https://api.github.com/repos/Homebrew/brew/issues/comments/236366457","html_url":"https://github.com/Homebrew/brew/pull/597#issuecomment-236366457","issue_url":"https://api.github.com/repos/Homebrew/brew/issues/597","id":236366457,"user":{"login":"MikeMcQuaid","id":125011,"avatar_url":"https://avatars.githubusercontent.com/u/125011?v=3","gravatar_id":"","url":"https://api.github.com/users/MikeMcQuaid","html_url":"https://github.com/MikeMcQuaid","followers_url":"https://api.github.com/users/MikeMcQuaid/followers","following_url":"https://api.github.com/users/MikeMcQuaid/following{/other_user}","gists_url":"https://api.github.com/users/MikeMcQuaid/gists{/gist_id}","starred_url":"https://api.github.com/users/MikeMcQuaid/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/MikeMcQuaid/subscriptions","organizations_url":"https://api.github.com/users/MikeMcQuaid/orgs","repos_url":"https://api.github.com/users/MikeMcQuaid/repos","events_url":"https://api.github.com/users/MikeMcQuaid/events{/privacy}","received_events_url":"https://api.github.com/users/MikeMcQuaid/received_events","type":"User","site_admin":true},"created_at":"2016-07-30T13:53:50Z","updated_at":"2016-07-30T13:53:50Z","body":"> This looks like a very narrow use case for a single consumer, so I doubt we're going to provide something like this. (But as stated in the previous paragraph, I think you're limiting yourself unnecessarily by relying on the default lookup paths and it would be good to understand where this limitation comes from before we can discuss possible alternatives for you and your users.)\r\n\r\nAs @UniqMartin says: unfortunately we're not going to provide this.\r\n\r\n> A more macOS-like experience would be of course to bundle all necessary libraries with your package. And if your crypto component relies on OpenSSL as a backend and cannot use the libraries natively provided by the OS, the most user-friendly solution would be to bundle those external dependencies to make your package fully self-contained.\r\n\r\nAgreed."}}
{"actor":{"display_login":"MikeMcQuaid"}}