From owner-freebsd-current Thu Dec 9 23:38: 4 1999 Delivered-To: freebsd-current@freebsd.org Received: from green.dyndns.org (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id 080D915388; Thu, 9 Dec 1999 23:36:49 -0800 (PST) (envelope-from green@FreeBSD.org) Received: from localhost (green@localhost [127.0.0.1]) by green.dyndns.org (8.9.3/8.9.3) with ESMTP id CAA24068; Fri, 10 Dec 1999 02:28:51 -0500 (EST) (envelope-from green@FreeBSD.org) Date: Fri, 10 Dec 1999 02:28:51 -0500 (EST) From: Brian Fundakowski Feldman X-Sender: green@green.dyndns.org To: Kris Kennaway Cc: current@FreeBSD.org Subject: Re: OpenSSL update In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, 9 Dec 1999, Kris Kennaway wrote: > Due to time constraints (exams) I haven't been able to do much more > towards the OpenSSL build infrastructure (specifically, jumping through > the requisite hoops for US stupidity). I have it building fine, although > compiling without RSA seems broken in openssl 0.9.4. Unfortunately, the > openssl binary seems to depend nontrivially on both libcrypto and libssl, > so we can't get away with just importing the former, without some > recoding. Why don't you want libssl, too? If we don't have that, then we'll end up having to install the port for using SSL and there will be redundancy (wasted space) and two copies of OpenSSL to maintain, still. > > Since I'm flying back home to australia next tuesday, and we have a > feature freeze for -current coming up, what I'll probably do is just > import all of openssl into the international repository, and enable the > build only for people who have defined USA_RESIDENT==NO. When I get back > in January I can get the munged version (i.e. w/o RSA sources, optionally > building with RSAREF) imported and enabled for US people, as well as > solving the binary distribution problem. The alternative, given the > feature freeze, seems to be to forgo any kind of enhanced crypto support > in 4.x, which would suck. > > Sound okay to everyone? Sounds great. I hope this means I get to import OpenSSH! > Kris > -- Brian Fundakowski Feldman \ FreeBSD: The Power to Serve! / green@FreeBSD.org `------------------------------' To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message