commit:     b5a0eaa2652ea41fbc5da66360c9f633e2d3ad5a
Author:     Zurab Kvachadze <zurabid2016 <AT> gmail <DOT> com>
AuthorDate: Tue Feb 10 13:48:23 2026 +0000
Commit:     Matt Jolly <kangie <AT> gentoo <DOT> org>
CommitDate: Mon Feb 23 12:10:38 2026 +0000
URL:        https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b5a0eaa2

net-libs/ngtcp2: revbump 1.20.0 to r1 + unmask ngtcp2[openssl]

ngtcp2 uses SSL_set_quic_tls_cbs to detect OpenSSL[1] and the function was
introduced in OpenSSL 3.5[2]. OpenSSL 3.5 is stable on all arches so we
can finally unmask net-libs/ngtcp2[openssl].

[1]: 
https://github.com/ngtcp2/ngtcp2/blob/ca898d32348c93af9fbbc81538505a1c1c062685/configure.ac#L264
[2]: https://docs.openssl.org/master/man3/SSL_set_quic_tls_cbs/#history

Signed-off-by: Zurab Kvachadze <zurabid2016 <AT> gmail.com>
Part-of: https://github.com/gentoo/gentoo/pull/45778
Closes: https://github.com/gentoo/gentoo/pull/45778
Signed-off-by: Matt Jolly <kangie <AT> gentoo.org>

 .../ngtcp2/{ngtcp2-9999.ebuild => ngtcp2-1.20.0-r1.ebuild}   | 12 ++++++++++--
 net-libs/ngtcp2/ngtcp2-9999.ebuild                           | 12 ++++++++++--
 profiles/base/package.use.mask                               |  5 -----
 3 files changed, 20 insertions(+), 9 deletions(-)

diff --git a/net-libs/ngtcp2/ngtcp2-9999.ebuild 
b/net-libs/ngtcp2/ngtcp2-1.20.0-r1.ebuild
similarity index 80%
copy from net-libs/ngtcp2/ngtcp2-9999.ebuild
copy to net-libs/ngtcp2/ngtcp2-1.20.0-r1.ebuild
index 42d4a5a65c83..4df7de01544a 100644
--- a/net-libs/ngtcp2/ngtcp2-9999.ebuild
+++ b/net-libs/ngtcp2/ngtcp2-1.20.0-r1.ebuild
@@ -27,18 +27,26 @@ HOMEPAGE="https://nghttp2.org/ngtcp2/ 
https://github.com/ngtcp2/ngtcp2";
 
 LICENSE="MIT"
 SLOT="0/0"
-IUSE="+gnutls openssl +ssl"
+IUSE="+gnutls +openssl +ssl"
 REQUIRED_USE="ssl? ( || ( gnutls openssl ) )"
 
+# Uses SSL_set_quic_tls_cbs to detect OpenSSL. The function was introduced in
+# OpenSSL 3.5:
+# https://docs.openssl.org/master/man3/SSL_set_quic_tls_cbs/#history.
 RDEPEND="
        ssl? (
                gnutls? ( >=net-libs/gnutls-3.7.2:=[${MULTILIB_USEDEP}] )
-               openssl? ( >=dev-libs/openssl-1.1.1:=[${MULTILIB_USEDEP}] )
+               openssl? ( >=dev-libs/openssl-3.5:=[${MULTILIB_USEDEP}] )
        )
 "
 DEPEND="${RDEPEND}"
 BDEPEND+=" virtual/pkgconfig"
 
+# QuicTLS function, the OpenSSL support is checked via SSL_set_quic_tls_cbs.
+QA_CONFIG_IMPL_DECL_SKIP=(
+       'SSL_provide_quic_data'
+)
+
 src_prepare() {
        default
        [[ ${PV} == 9999 ]] && eautoreconf

diff --git a/net-libs/ngtcp2/ngtcp2-9999.ebuild 
b/net-libs/ngtcp2/ngtcp2-9999.ebuild
index 42d4a5a65c83..4df7de01544a 100644
--- a/net-libs/ngtcp2/ngtcp2-9999.ebuild
+++ b/net-libs/ngtcp2/ngtcp2-9999.ebuild
@@ -27,18 +27,26 @@ HOMEPAGE="https://nghttp2.org/ngtcp2/ 
https://github.com/ngtcp2/ngtcp2";
 
 LICENSE="MIT"
 SLOT="0/0"
-IUSE="+gnutls openssl +ssl"
+IUSE="+gnutls +openssl +ssl"
 REQUIRED_USE="ssl? ( || ( gnutls openssl ) )"
 
+# Uses SSL_set_quic_tls_cbs to detect OpenSSL. The function was introduced in
+# OpenSSL 3.5:
+# https://docs.openssl.org/master/man3/SSL_set_quic_tls_cbs/#history.
 RDEPEND="
        ssl? (
                gnutls? ( >=net-libs/gnutls-3.7.2:=[${MULTILIB_USEDEP}] )
-               openssl? ( >=dev-libs/openssl-1.1.1:=[${MULTILIB_USEDEP}] )
+               openssl? ( >=dev-libs/openssl-3.5:=[${MULTILIB_USEDEP}] )
        )
 "
 DEPEND="${RDEPEND}"
 BDEPEND+=" virtual/pkgconfig"
 
+# QuicTLS function, the OpenSSL support is checked via SSL_set_quic_tls_cbs.
+QA_CONFIG_IMPL_DECL_SKIP=(
+       'SSL_provide_quic_data'
+)
+
 src_prepare() {
        default
        [[ ${PV} == 9999 ]] && eautoreconf

diff --git a/profiles/base/package.use.mask b/profiles/base/package.use.mask
index 082039e3df51..0755465cbaa0 100644
--- a/profiles/base/package.use.mask
+++ b/profiles/base/package.use.mask
@@ -808,11 +808,6 @@ dev-python/statsmodels doc
 # Here we are following that path too.
 >=sys-libs/glibc-2.33-r2 crypt
 
-# Craig Andrews <[email protected]> (2019-09-12)
-# OpenSSL (as of version 1.1.1) doesn't have APIs for QUIC support
-# see https://github.com/openssl/openssl/pull/8797
-net-libs/ngtcp2 openssl
-
 # Thomas Deutschmann <[email protected]> (2019-09-02)
 # PGO not yet supported for comm-central, bug #693160
 >=mail-client/thunderbird-68 pgo

Reply via email to