On Thu, Sep 29, 2022 at 7:59 PM Matthew Miller <mattdm(a)fedoraproject.org> wrote:
On Thu, Sep 29, 2022 at 07:37:33PM +0200, Neal Gompa wrote:
> around OpenSSL was brought up, and Adam Williamson brought up that we
> might not need to hobble OpenSSL anymore[1]. A quick check seems to
> indicate we no longer do it for GnuTLS either, and haven't for many
> years[2].
I think this is apples and oranges? The gnutls change you link references
SRP, which is mentioned as no longer removed in the openssl "hobble" script.
The remaining question is the ECC stuff.
SRP was the last thing the script did. It used to do more. It
obviously does nothing now.
--
真実はいつも一つ!/ Always, there's only one truth!