From owner-freebsd-security@FreeBSD.ORG Thu Apr 13 12:25:11 2006 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3E88716A400 for ; Thu, 13 Apr 2006 12:25:11 +0000 (UTC) (envelope-from arne_woerner@yahoo.com) Received: from web30313.mail.mud.yahoo.com (web30313.mail.mud.yahoo.com [68.142.201.231]) by mx1.FreeBSD.org (Postfix) with SMTP id A8E9043D48 for ; Thu, 13 Apr 2006 12:25:10 +0000 (GMT) (envelope-from arne_woerner@yahoo.com) Received: (qmail 90221 invoked by uid 60001); 13 Apr 2006 12:25:10 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=aEQzCy/A2rsAW5i3KcYMhEUnJRnOA4EGiIvkiK3MYgD2h9zRD8XKs0y7iLINpEsViqMLqgz8Q4LH405r3cTNtHiSqiuIgS79ErQWrt5FLP+VyPUVL8Wtb6wqxqwvsGK3mH/ji0UVgwQJ2uvmp26KYeviQi3Q3N/ZydfMWAPLbZw= ; Message-ID: <20060413122510.90219.qmail@web30313.mail.mud.yahoo.com> Received: from [213.54.78.184] by web30313.mail.mud.yahoo.com via HTTP; Thu, 13 Apr 2006 05:25:10 PDT Date: Thu, 13 Apr 2006 05:25:10 -0700 (PDT) From: "R. B. Riddick" To: Tom In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Cc: freebsd-security@freebsd.org Subject: Re: Question about Export Restrictions X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 13 Apr 2006 12:25:11 -0000 Tom writes: > I work for a company that builds an appliance based on FreeBSD > (4.X) and we've just had our first question come up about exporting > the appliance out of the US (specifically the EU). > > Since FreeBSD uses OpenSSL/OpenSSH, I'm under the impression > that we need to gut out anything higher than 56bit (3DES/etc) crypto > out of it. > What about downloading and installing the crypto package(-s) right at the deployment site (in europe or whereever) from some Canadian or european (e. g. Denmark) ftp server? That's what I do since many years and I still never was in prison... -Arne --- Canada Oh Canada... __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com