NOCRYPT / NOSECURE

Ruslan Ermilov ru at freebsd.org
Thu May 15 11:57:47 PDT 2003


On Thu, May 15, 2003 at 05:32:57PM +0200, Dag-Erling Smorgrav wrote:
> Ruslan Ermilov <ru at freebsd.org> writes:
> > On Thu, May 15, 2003 at 04:20:08PM +0200, Dag-Erling Smorgrav wrote:
> > > I would therefore like to remove NOSECURE, preferably before 5.1.
> > Please go ahead.
> 
> See attached patch.
> 
> > > NO_OPENSSL is also a subset of NOCRYPT.  There is so little that
> > > builds with NO_OPENSSL but not with NOCRYPT that I think it might be
> > > worthwhile to deprecate NO_OPENSSL and change the description of
> > > NOCRYPT from "will prevent building of crypt versions" to "do not
> > > build crypto-related software"
> > I'm not so sure about NO_OPENSSL.
> 
> What crypto stuff do we have that doesn't use OpenSSL?  As far as I
> can determine, there's only ed(1) and bdes(1) (which use libcipher but
> should probably use libcrypt instead) and some (but not all) of the
> cryptography-related kernel modules (for which there should be a
> separate option).
> 
I just recommend that we delay removing NO_OPENSSL after 5.1
is out, as there seem to be some outstanding (minor) issues.


Cheers,
-- 
Ruslan Ermilov		Sysadmin and DBA,
ru at sunbay.com		Sunbay Software AG,
ru at FreeBSD.org		FreeBSD committer,
+380.652.512.251	Simferopol, Ukraine

http://www.FreeBSD.org	The Power To Serve
http://www.oracle.com	Enabling The Information Age
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-arch/attachments/20030515/6e3ce95d/attachment.bin


More information about the freebsd-arch mailing list