Date: Sat, 19 Feb 2000 22:52:48 -0800 From: Doug Barton <Doug@gorean.org> To: Kris Kennaway <kris@FreeBSD.org> Cc: "Victor A. Salaman" <salaman@teknos.com>, "'Jordan K. Hubbard'" <jkh@zippy.cdrom.com>, freebsd-current@FreeBSD.org Subject: Re: openssl in -current Message-ID: <38AF8F40.CB06E7C7@gorean.org> References: <Pine.BSF.4.21.0002192215070.8731-100000@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Kris Kennaway wrote:
>
> On Sun, 20 Feb 2000, Victor A. Salaman wrote:
>
> > Don't remove OpenSSL from the three... put the whole thing there, the whole
> > openssl distro in the tree. The problem with the patent is not that you
> > CAN'T get the software, the problem is that you can't build with it and use
> > it. But nobody said that you can't have it in the system. It's up to the
> > USA_RESIDENT variable that RSAREF would be built (over the net). The only
> > thing we would need to do is modify sysinstall if you are a USA resident
> > with a disclaimer screen. That way we put the responsability onto the user,
> > not the FreeBSD group.
>
> This doesn't help. The RSA source not being there isn't the problem, the
> problem is that there are two different binary versions depending on how
> you build it (with rsaref or not).
So we do what we do with DES. By default you have openssl without RSA, and
the RSA version is available as an after market distribution. All that's
required is the work necessary to make the two openssl distributions.
As for the ports, most of the ports that have the ability to use RSA also
have the ability to turn it off (TMK), usually through a configure
--variable. The ones that don't can have warnings spit out. Until the
patent runs out, leaving RSA as a port seems to be the only reasonable
alternative.
Once again, I don't think that the problems here are insurmountable, they
will just require some engineering.
Doug
--
"Welcome to the desert of the real."
- Laurence Fishburne as Morpheus, "The Matrix"
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38AF8F40.CB06E7C7>