Why is openssl source tree embedded in the project?

I’m installing the project on a rasberry pi and noticed it was taking quite a while. I just found that openssl is being compiled from scratch using a copy of the source tree inside mediasoup repo. This is a very unusual way to manage dependencies. It also means security updates are not applied as quickly as if the system’s openssl was used right?
Can you please explain what the motivation for this design choice was?

  • Avoiding conflicts with other versions of such dependencies that could be present in the system.
  • Auto-containing everything needed in project the source code. OpenSSL is not the only external dependency.

We try to keep dependency the versions updated.

1 Like