Re: NOCRYPT / NOSECURE

From: Mark Murray (mark_at_grondar.org)
Date: 05/16/03

  • Next message: Marius Strobl: "Re: NOCRYPT / NOSECURE"
    To: Dag-Erling Smorgrav <des@ofug.org>
    Date: Fri, 16 May 2003 08:20:07 +0100
    
    

    Dag-Erling Smorgrav writes:
    > Mark Murray <mark@grondar.org> writes:
    > > Dag-Erling Smorgrav writes:
    > >> 'ln -s /usr/bin/openssl /usr/bin/md5' is almost right for md5(1),
    > >> except for some parentheses in the output IIRC. ISTR the same goes
    > >> for sha1(1).
    > > A one-liner shell script does it :-).
    >
    > but as others have pointed out, we need md5 even in the NOCRYPT case
    > (and it's not export-controlled anyway), so we can't touch it.

    Hmm. You are right.

    But...

    I can clean up the world build pretty extensively if it can be mostly
    guaranteed that src/crypto is present.

    We currently have 2 telnets; the non-crypto telnet is constructed
    with unifdef(1), and could easily be made by NOT defining some
    "naughty" macros (-DENCRYPTION, -DAUTHENTICATION). This would
    kill for ever the 'thou must commit to both telnets in the
    prescribed manner' rule, at the risk of possibly not having telnet
    after make world if src/crypto is not present.

    Likewise, we have libmd, which is a duplicate of some of the functionality
    of libcrypto. I'd like to see if a "safe" libhash (say) can be made
    from src/crypto/openssl/..., which libcrypto (if present) could depend on.

    The downside of this is requiring that src/crypto is present or else
    losing some functionality.

    SO - my query reduces to "How many folks are there out there who can
    NOT have crypto SOURCES on their system, even if they are doing a non
    crypto build?"

    M

    --
    Mark Murray
    iumop ap!sdn w,I idlaH
    _______________________________________________
    freebsd-arch@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-arch
    To unsubscribe, send any mail to "freebsd-arch-unsubscribe@freebsd.org"
    

  • Next message: Marius Strobl: "Re: NOCRYPT / NOSECURE"