Re: Crypto consolidation in debian ?
On Wed, Apr 27, 2011 at 12:29 PM, Bastian Blank <waldi@debian.org> wrote:
> On Wed, Apr 27, 2011 at 11:40:14AM +0200, Bastien ROUCARIES wrote:
>> On Wed, Apr 27, 2011 at 1:05 AM, Russ Allbery <rra@debian.org> wrote:
>> > Patches to WebAuth to support NSS are welcome, but I'm sure not going to
>> > bother. Seems like a waste of time to me. If I were going to port to any
>> > other crypto library, I'd port to gcrypto, not NSS.
>> Gcrypto is GPL and thus incompatible with a lot of crypto package
>> unfortunatly. Not good for consolidation
>
> So is libnss, at least the version on my workstation. Your point taken?
>
> Oh. And parts are 4-clause BSD (if I read this correctly).
Debian copyright is out of date, the close was removed by berkeley and
reflected on the source...
The main point is the FIPS 140 certification for external software if
using some simple rules documented at
http://www.mozilla.org/projects/security/pki/nss/fips/secpolicy.pdf
Bastien
>
> Bastian
>
> --
> ... The prejudices people feel about each other disappear when they get
> to know each other.
> -- Kirk, "Elaan of Troyius", stardate 4372.5
>
>
> --
> To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> Archive: [🔎] 20110427102932.GA2445@wavehammer.waldi.eu.org">http://lists.debian.org/[🔎] 20110427102932.GA2445@wavehammer.waldi.eu.org
>
>
Reply to: