[Bug 2223664] New: Review Request: aws-lc - A general-purpose cryptographic library

https://bugzilla.redhat.com/show_bug.cgi?id=2223664

Bug ID: 2223664
           Summary: Review Request: aws-lc - A general-purpose
                    cryptographic library
           Product: Fedora
           Version: rawhide
                OS: Linux
            Status: NEW
         Component: Package Review
          Severity: medium
          Assignee: [e-mail]
          Reporter: [e-mail]
        QA Contact: [e-mail]
                CC: [e-mail]
  Target Milestone: ---
    Classification: Fedora

spec:
https://download.copr.fedorainfracloud.org/results/fed500/aws-lc/fedora-38-x...
srpm:
https://download.copr.fedorainfracloud.org/results/fed500/aws-lc/fedora-38-x...

summary: AWS-LC is a general-purpose cryptographic library maintained by
the AWS Cryptography team for AWS and their customers. It іs
based on code from the Google BoringSSL project and the OpenSSL
project.

AWS-LC contains portable C implementations of algorithms needed
for TLS and common applications. For performance critical algorithms,
optimized assembly versions are included for x86 and ARM.

fas: fed500

Reproducible: Always

[Bug 2223664] Review Request: aws-lc - A general-purpose cryptographic library

https://bugzilla.redhat.com/show_bug.cgi?id=2223664

Benson Muite  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Doc Type|---                         |If docs needed, set a value
             Blocks|                            |182235 (FE-Legal)

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=182235
[Bug 182235] Fedora Legal Tracker

[Bug 2223664] Review Request: aws-lc - A general-purpose cryptographic library

https://bugzilla.redhat.com/show_bug.cgi?id=2223664

--- Comment #1 from Benson Muite  ---
Has some bundled libraries and conflicts, but checking legal status first.

[Bug 2223664] Review Request: aws-lc - A general-purpose cryptographic library

https://bugzilla.redhat.com/show_bug.cgi?id=2223664

Fedora Review Service  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |https://github.com/aws/aws-
                   |                            |lc

--- Comment #2 from Fedora Review Service  ---
Copr build:
https://copr.fedorainfracloud.org/coprs/build/6182232
(succeeded)

Review template:
https://download.copr.fedorainfracloud.org/results/@fedora-review/fedora-rev...

Please take a look if any issues were found.

---
This comment was created by the fedora-review-service
https://github.com/FrostyX/fedora-review-service

If you want to trigger a new Copr build, add a comment containing new
Spec and SRPM URLs or [fedora-review-service-build] string.

[Bug 2223664] Review Request: aws-lc - A general-purpose cryptographic library

https://bugzilla.redhat.com/show_bug.cgi?id=2223664

--- Comment #3 from Benson Muite  ---
https://pagure.io/packaging-committee/issue/1409

[Bug 2223664] Review Request: aws-lc - A general-purpose cryptographic library

https://bugzilla.redhat.com/show_bug.cgi?id=2223664

Marc-Andre Lureau  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
              Alias|                            |aws-lc

[Bug 2223664] Review Request: aws-lc - A general-purpose cryptographic library

https://bugzilla.redhat.com/show_bug.cgi?id=2223664

Simo Sorce  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #4 from Simo Sorce  ---
Hello,
I would like to know why we would want this library in Fedora.

In general the Fedora Cyrpto team would like to avoid crypto library
proliferation as much as possible, unless there is no other option and the
dependent packages are a must have, and they cannot use one of the existing
crypto libraries for some reason..

Also please review
https://docs.fedoraproject.org/en-US/packaging-guidelines/CryptoPolicies/ and
explain how this library will comply with crypto policies.