From owner-freebsd-arch@FreeBSD.ORG Thu May 15 08:33:02 2003 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4AD7C37B401; Thu, 15 May 2003 08:33:02 -0700 (PDT) Received: from flood.ping.uio.no (flood.ping.uio.no [129.240.78.31]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1A67843FCB; Thu, 15 May 2003 08:33:00 -0700 (PDT) (envelope-from des@ofug.org) Received: by flood.ping.uio.no (Postfix, from userid 2602) id 8E74E530E; Thu, 15 May 2003 17:32:58 +0200 (CEST) X-URL: http://www.ofug.org/~des/ X-Disclaimer: The views expressed in this message do not necessarily coincide with those of any organisation or company with which I am or have been affiliated. To: Ruslan Ermilov References: <20030515145721.GA68695@sunbay.com> From: Dag-Erling Smorgrav Date: Thu, 15 May 2003 17:32:57 +0200 In-Reply-To: <20030515145721.GA68695@sunbay.com> (Ruslan Ermilov's message of "Thu, 15 May 2003 17:57:21 +0300") Message-ID: User-Agent: Gnus/5.1001 (Gnus v5.10.1) Emacs/21.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: arch@freebsd.org Subject: Re: NOCRYPT / NOSECURE X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 May 2003 15:33:02 -0000 Ruslan Ermilov writes: > On Thu, May 15, 2003 at 04:20:08PM +0200, Dag-Erling Smorgrav wrote: > > I would therefore like to remove NOSECURE, preferably before 5.1. > Please go ahead. See attached patch. > > NO_OPENSSL is also a subset of NOCRYPT. There is so little that > > builds with NO_OPENSSL but not with NOCRYPT that I think it might be > > worthwhile to deprecate NO_OPENSSL and change the description of > > NOCRYPT from "will prevent building of crypt versions" to "do not > > build crypto-related software" > I'm not so sure about NO_OPENSSL. What crypto stuff do we have that doesn't use OpenSSL? As far as I can determine, there's only ed(1) and bdes(1) (which use libcipher but should probably use libcrypt instead) and some (but not all) of the cryptography-related kernel modules (for which there should be a separate option). DES -- Dag-Erling Smorgrav - des@ofug.org