Re: [RFC] use libnettle for crypto

From: Eliezer Croitoru <eliezer_at_ngtech.co.il>
Date: Tue, 11 Mar 2014 23:46:03 +0200

On 11/03/2014 23:15, Amos Jeffries wrote:
> On 2014-03-12 06:40, Eliezer Croitoru wrote:
>> What about choosing between openssl and nettle?
>
>
> Given a choice between those two nettle wins hand-down on API stability
> and licensing grounds.
>
> OpenSSL has licensing policy issues on Debian and derived systems, and
> MacOS. RHEL and derived systems have a number of ongoing compatibility
> issues that we have been fighting against for a long while. So we are
> having to bundle our own copies of the crypto code to simply make Squid
> work when OpenSSL is not able to be provided.
>
> Using Nettle is most useful to remove that bundled code forced on us by
> those uses of OpenSSL. Gaining access to more modern algorithms is a
> bonus side effect.
OK so +1 from me.

The issue ise that I yet to have a working RPM that I can install that I
have created.
I will use the ones from rpmforge manually while holding a copy of
existing ones somewhere on my server.

Eliezer
Received on Tue Mar 11 2014 - 21:46:13 MDT

This archive was generated by hypermail 2.2.0 : Wed Mar 12 2014 - 12:00:15 MDT