scope of private libraries

Benjamin Kaduk kaduk at MIT.EDU
Mon Jun 1 18:06:07 UTC 2015


On Mon, 1 Jun 2015, Franco Fichtner wrote:

> As a side note, does pkgng really have to depend on base
> OpenSSL; does it have to depend on a full-blown SSL library?

Yes.

-Ben

(From IRC:)

   efnet / #bsddev / bjk  13:17  ()
       In particular, Franco asked "does pkg really need to depend on openssl from
       base?"
   efnet / #bsddev / bjk  13:17  ()
       To which I believe the answer is "yes", but am not authoritative
   efnet / #bsddev / bapt  13:48  (bapt!~bapt at ns3301091.ip-178-32-217.eu)
       bjk: I'm not reading but the answer is yes
   efnet / #bsddev / bapt  13:48  (bapt!~bapt at ns3301091.ip-178-32-217.eu)
       pkg needs openssl
   efnet / #bsddev / bapt  13:48  (bapt!~bapt at ns3301091.ip-178-32-217.eu)
       because of rsa keys
   efnet / #bsddev / bapt  13:48  (bapt!~bapt at ns3301091.ip-178-32-217.eu)
       because of sha256 as well
   efnet / #bsddev / bapt  13:48  (bapt!~bapt at ns3301091.ip-178-32-217.eu)
       well this one could be replaced by libmd but it is way slower
   efnet / #bsddev / bapt  13:49  (bapt!~bapt at ns3301091.ip-178-32-217.eu)
       also without openssl no https support



More information about the freebsd-security mailing list