Bug#558309: please incorporate nss patches from Fedora
On Fri, Nov 27, 2009 at 08:11:19PM +0100, Andreas Barth wrote:
> Fedora provides an patch at
> https://cvs.fedoraproject.org/viewvc/F-12/openssh/openssh-5.3p1-nss-keys.patch?revision=1.1&view=markup&sortby=rev
> that use keys from the common mozilla security framework (please see
> http://fedoraproject.org/wiki/FedoraCryptoConsolidation for the
> background). I have tested these patches with an pkcs11-smartcard
> which currently can't be used in openssh and they work for me (only
> difference for Debian is that the include headers are in different
> directories, and the obvious changes for debian/{rules,control,copyright}).
>
> As these patches are provided by Fedora / RedHat there is also some
> security support (and I assume RedHat will try to push them upstream
> as well). Would be great if this patch could be accepted.
While I applaud the idea of centralising on a single security framework,
I don't feel confident to review this myself, and I would rather wait
until upstream accepts it.
--
Colin Watson [cjwatson@debian.org]
Reply to: