Concern about FedoraCryptoConsolidation
tmraz at redhat.com
Tue May 7 15:24:29 UTC 2013
On Tue, 2013-05-07 at 11:16 -0400, Paul Wouters wrote:
> On Tue, 7 May 2013, Matej Cepl wrote:
> > Subject: Re: Concern about FedoraCryptoConsolidation
> > On 2013-05-07, 04:10 GMT, Richard Levenberg wrote:
> >> https://fedoraproject.org/wiki/FedoraCryptoConsolidation
> >> While I understand the reasons for this idea of Consolidation I have a
> >> concern that very valid use cases are being ignored or unknown. As an
> >> example I have a use case supported with curl and OpenSSL like this:
> > I wouldn't be much worried about that project. See the date of that page
> > and state of the (non-)consolidation in the current Fedora.
> We should be worried. The proliferance of basement crypto is a real problem.
> If you want your package to get into RHEL, you will need to ensure your
> package has no home grown crypto, and uses either nss, openssl or libgcrypt.
Or gnutls (but not nettle directly!).
No matter how far down the wrong road you've gone, turn back.
More information about the devel