crypto consolidation status

Tomas Mraz tmraz at redhat.com
Tue Dec 3 18:58:11 UTC 2013


On Út, 2013-12-03 at 18:46 +0100, Jan Včelák wrote:
> Hello list.
> 
> What is the current status of Crypto Consolidation in Fedora? Is it still
> current and is the page up to date [1]?

The page is mostly up to date.

> In CZ.NIC, we are considering a switch of cryptography backend for our
> authoritative DNS server Knot DNS. And we take interest in current
> tendencies in bleeding edge distros. ;-)

I'd suggest to follow the "Medium term goals" from the page. That means
to choose the backend from one of the following libraries (in the order
of preference).
     1. NSS
     2. GNUTLS (with nettle as crypto backend, but nettle never used
        directly by applications)
     3. OpenSSL
     4. libgcrypt

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb
(You'll never know whether the road is wrong though.)



More information about the devel mailing list