Gentoo Archives: gentoo-dev

From: Brian Evans <grknight@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] LibreSSL import plan
Date: Thu, 01 Oct 2015 13:25:56
Message-Id: 560D3456.2080506@gentoo.org
In Reply to: Re: [gentoo-dev] LibreSSL import plan by Andrew Savchenko
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 On 9/30/2015 5:40 PM, Andrew Savchenko wrote:
5
6 > 2. Some old features are removed:
7 > https://en.wikipedia.org/wiki/LibreSSL#Added_features Most notably
8 > SSLv3 and MD5 support cancelled, while they are indeed not secure,
9 > some apps are likely still depend on them.
10
11 My concern is if they remove the MD5 crypto functions.
12
13 This would render libressl useless for MySQL and friends (what I
14 maintain).
15
16 If they have a roadmap of such things, I would love to see it before I
17 go and put work into adding libressl to my packages.
18 I don't want to back paddle and take it out again if things just won't
19 work in the future.
20
21 Brian
22 -----BEGIN PGP SIGNATURE-----
23 Version: GnuPG v2.0.17 (MingW32)
24
25 iQIcBAEBAgAGBQJWDTRVAAoJENH3ge/59KO2CfcQAIn0lMGof1eEnxI9kUHgPvc6
26 aguF+bIoMTBmaTb3ltsC0evZVL1I/TECY52j6kuc9XIekXIWGRPgN1cZrQB4lCb2
27 H3ZapUMhBA5L7tVNU0Rmq1Y0hnehIOWWnxPRh6KGEg4b8SYy7Phw2vndFWKY0vUs
28 3s/7jP+zX+tEJ8zko9JfC/ZsbYFvPuUA3yC7Fflls5K9fQ9yMtyshejfxFsNTVCV
29 8plUbqr2HCZodjps0R2HbXajgXkYiv3NoG39FlMpWgc4THdZ9qzEsRovSekzzEny
30 FBhCnxraf4i4l+aGTFNB1eVRz4EiUixEFQfbgXyIl3G6XPmOPpvy61c28d4M99y5
31 uKz/cnZV3vuAjBsj/q9LQis5KLg4eXgpWmCifYAHgElVPgNZT37i3QJ+hFxsSIbn
32 J46+e0yKdcOiTmGmO1pkvZjZwcE+gbYYfNbrNVFjWxNOGd4HaC/CXr62Hp3/UYZ9
33 aTMPz+eRRncSWIA1Kk2Klry5aFczoGSDXSLEkTBo5nPd7ncwX5BRD6BJVmt9pGUa
34 hzRMz+1D4/7xL144YzcW2GSoGJtePElXSTWW4jOvXEtKiEEnxTiS+B9FqwfYSu1W
35 FNuqAgL2cytflZEKqjVZil6DVd29xk/yOuR2cMAYmiZgopFie6Th/2SOGI4V9O07
36 PxGY3U8Y+XXdMzuwY+Md
37 =tp2I
38 -----END PGP SIGNATURE-----

Replies

Subject Author
Re: [gentoo-dev] LibreSSL import plan Andrew Savchenko <bircoph@g.o>