From owner-freebsd-security@freebsd.org Mon Jul 11 18:28:53 2016 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 17584B924A9; Mon, 11 Jul 2016 18:28:53 +0000 (UTC) (envelope-from jkim@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:1900:2254:206c::16:87]) by mx1.freebsd.org (Postfix) with ESMTP id 99F071673; Mon, 11 Jul 2016 18:28:52 +0000 (UTC) (envelope-from jkim@FreeBSD.org) Subject: Re: GOST in OPENSSL_BASE To: Andrey Chernov , Slawa Olhovchenkov , freebsd-security@freebsd.org, freebsd-current@freebsd.org References: <20160710133019.GD20831@zxy.spb.ru> From: Jung-uk Kim Message-ID: Date: Mon, 11 Jul 2016 14:28:45 -0400 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="Ax3pEeGLHHXTLwxqTqo8c1xK9bkG3WhKr" X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Jul 2016 18:28:53 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Ax3pEeGLHHXTLwxqTqo8c1xK9bkG3WhKr Content-Type: multipart/mixed; boundary="t2nSoJ2UCJvOCFfhw4hVxaT4grHXawN9A" From: Jung-uk Kim To: Andrey Chernov , Slawa Olhovchenkov , freebsd-security@freebsd.org, freebsd-current@freebsd.org Message-ID: Subject: Re: GOST in OPENSSL_BASE References: <20160710133019.GD20831@zxy.spb.ru> In-Reply-To: --t2nSoJ2UCJvOCFfhw4hVxaT4grHXawN9A Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 07/10/16 10:10 AM, Andrey Chernov wrote: > On 10.07.2016 16:30, Slawa Olhovchenkov wrote: >> I am surprised lack of support GOST in openssl-base. >> Can be this enabled before 11.0 released? >=20 > AFAIK openssl maintainers says something like they can't support this > code and it will become rotten shortly with new changes, so they drop i= t. [OpenSSL-maintainer-for-the-base hat on] GOST is supported on FreeBSD 10.x and 11.x. We will not drop it on these branches unless secteam explicitly ask us to do so. However, we *may* drop it from 12.0 *iff* we import OpenSSL 1.1.0 branch. [OpenSSL-maintainer-for-the-base hat off] Jung-uk Kim --t2nSoJ2UCJvOCFfhw4hVxaT4grHXawN9A-- --Ax3pEeGLHHXTLwxqTqo8c1xK9bkG3WhKr Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXg+VdAAoJEHyflib82/FGBqoH/A2FKBPIXcNa5BuYblQqSa6F Efhz6zDkRjvlv6RUtKdfFeOcCLJqjtANpw3gaxw3ZmEBdGi3g9a9jswIxrHsRZHn OLlrP6KaCfUnu9BDF+Gj59c2eikkDdChyVv+EYnalrUFN4msq/7byUxAVpPfjts3 H9VBb/CKk5ryxcCh8VtybpY1WzEL9ij3BIHkAAxtWrVIkhFnjhdvuiLkgXChmx/i CaoGqVHrE5ROVJHwjiDNHkTpN9n59C4W1Ljkw68aS6oRNYWGEcMLyfSsdJ7ng3B6 wcbvesohte76d8tRsPgH/c1ZveRIDl26R/GC3hmJNlAEEDaNKRSh8zPxP9opV08= =hdVV -----END PGP SIGNATURE----- --Ax3pEeGLHHXTLwxqTqo8c1xK9bkG3WhKr--