[MacPorts] #51516: MacPorts should use a bundled copy of a newer libcurl rather than the OS X version

[MacPorts]

#51516: MacPorts should use a bundled copy of a newer libcurl rather than the OS X
version
---------------------------+--------------------------------
  Reporter:  ryandesign@…  |      Owner:  macports-tickets@…
      Type:  enhancement   |     Status:  new
  Priority:  Normal        |  Milestone:  MacPorts Future
 Component:  base          |    Version:
Resolution:                |   Keywords:
      Port:                |
---------------------------+--------------------------------

Comment (by ryandesign@…):

 Replying to [comment:11 cal@…]:
 > Replying to [comment:10 ryandesign@…]:
 > > Once we are properly mirroring distfiles before doing buildbot builds,
 that will probably be a sufficient fix. But it doesn't help old systems
 download from other sites that require https.
 >
 > No matter what we do, that's a problem these platforms will always have,
 and will continue to do so. As I said, we cannot save abandoned platforms
 from dying.

 I don't understand why you would say that. The problem right now is caused
 by older systems have an old SSL implementation. The proposed fix is to
 provide a newer SSL implementation in MacPorts. That fixes the problem.

 I agree that if we do this, we should release a new version of MacPorts
 when a new version of the SSL library is available, in case the new
 version of the SSL library fixes security vulnerabilities. I agree that
 our record to date of releasing new versions of MacPorts in a timely
 fashion is not good, which would be a reason not to make this change right
 now. However, I hope that once we move to GitHub, we can improve our
 processes and procedures to make it much easier to release new versions of
 MacPorts.

-- 
Ticket URL: <https://trac.macports.org/ticket/51516#comment:13>
MacPorts <https://www.macports.org/>
Ports system for the Mac operating system