From owner-cvs-all Tue Dec 28 8:39:25 1999 Delivered-To: cvs-all@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 758) id ED622154F4; Tue, 28 Dec 1999 08:39:09 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id 7E9F11CD816; Tue, 28 Dec 1999 08:39:09 -0800 (PST) (envelope-from kris@hub.freebsd.org) Date: Tue, 28 Dec 1999 08:39:09 -0800 (PST) From: Kris Kennaway To: cvs-all@freebsd.org, cvs-committers@freebsd.org Subject: Re: cvs commit: src/secure/usr.bin Makefile src/secure/usr.bin/openssl Makefile In-Reply-To: <199912281616.SAA32714@internat.freebsd.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk On Tue, 28 Dec 1999, Kris Kennaway wrote: > Log: > Build infrastructure for openssl(1), a general-purpose crypto utility. > Based on, but heavily modified from, the OpenBSD Makefile. The OpenSSL stuff is currently only built if you have USA_RESIDENT == NO, because of bugs with the NO_RSA mode needed for compilation in the US. I've just seen patches on the openssl list which claim to fix this, so it shouldn't take much effort to do so. OpenBSD have sidestepped this problem since they don't have any RSA code in their openssl source, just function stubs (presumably the binaries they ship are built from outside the tree). I'll be fixing this when I get back to the US in early January, as well as hacking in RSAREF support so non-commercial users can use RSA (e.g. for OpenSSH support, which Mark or some other non-US citizen can now import into internat). I'm planning to import a neutered version of the internat code (minus the RSA and IDEA source) onto freefall when I get back, which is the one US people should be using, but in case they're using internat they still won't get an illegal binary out of it. This should work on both the alpha and i386, although there are no platform optimizations performed at present (e.g. assembler code for crypto algorithms). This would just involve some makefile hackery. Hopefully I've committed everything necessary for make world to not break :-) Enjoy! Kris To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message