From owner-freebsd-stable Tue Feb 29 18:14:17 2000 Delivered-To: freebsd-stable@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 758) id D8F9737BCEC; Tue, 29 Feb 2000 18:14:14 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id D5B6B2E8158; Tue, 29 Feb 2000 18:14:14 -0800 (PST) (envelope-from kris@hub.freebsd.org) Date: Tue, 29 Feb 2000 18:14:14 -0800 (PST) From: Kris Kennaway To: Clifton Royston Cc: EKR , Matt Heckaman , freebsd-stable@FreeBSD.ORG Subject: Re: Trouble installing xpdf port in 3.4-stable In-Reply-To: <20000229091635.A23590@lava.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 29 Feb 2000, Clifton Royston wrote: > But isn't there a US patent issue (though it might expire later this > year, I believe) preventing distributing or using RSA code inside the > US without a license, unless you use RSA's approved reference version? Yes. Section 6.5 in the handbook attempts to explain the issues, but please note that it doesn't describe the current state of OpenSSL in FreeBSD 4.0 and will be changing in the next few days to better reflect reality. > And my understanding is that the latter has various legal conditions > attached and so is undesirable for anybody outside the US. If I It's not illegal, but no-one outside the US should be using it because, pure and simple, it's crap. Slow as cold molasses, and can't handle keys greater than 1024 bits. The OpenSSL native RSA implementation is much faster, so you really want to use that one if you're allowed to (which means everyone except people in the US). > understand their rules, I'm stretching it a bit by using from my home > machine to work, for instance. Right, for US people there ARE legal strings attached, because RSAREF is not licensed for general use, but it's the only version you may use. You can only use it for 'noncommercial purposes' - for an exact definition of that see /usr/ports/security/rsaref/files/LICENSE or LICENSE.english for an (RSA-supplied) english interpretation. Kris ---- In God we Trust -- all others must submit an X.509 certificate. -- Charles Forsythe To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message