This is the mail archive of the
ecos-discuss@sourceware.org
mailing list for the eCos project.
Re: Re: On Porting OpenSSL v1.0.0c
- From: Ross Younger <ecos at impropriety dot org dot uk>
- To: eCos Discussion <ecos-discuss at ecos dot sourceware dot org>
- Date: Tue, 14 Dec 2010 11:04:36 +0000
- Subject: Re: [ECOS] Re: On Porting OpenSSL v1.0.0c
- References: <AANLkTi=3hSnicTZ77Ci3Nfw9BEMYYv3Cg4Ub_kpA12QD@mail.gmail.com> <C4E8D0478C3D194FA02B65678CBB6C6087A78E6E66@DEFTHW99EC5MSX.ww902.siemens.net> <4D073A3D.9040706@dallaway.org.uk>
* John Dallaway <john@dallaway.org.uk> wrote:
> Mark, was there much effort involved in updating Andrew Lunn's original
> port of OpenSSL v0.9.6b? The version numbering suggests no major changes.
There were an awful lot of changes; that range spans almost nine
years of development. See http://www.openssl.org/news/changelog.html
for full details. (BTW, OpenSSL release numbering doesn't follow the
traditional major.minor.patch inaming scheme; it might be better described
as major.submajor.minor[patch].)
By the way, 0.9.8o is the subject of two recent security advisories;
anybody using it in a real project ought to upgrade to 0.9.8q or at
the very least read the advisories carefully and consider applying the
patches given within. (Indeed, anybody using OpenSSL in a real project
ought at the very least to subscribe to openssl-announce.)
> Does anyone have up-to-date information (with reference) on the
> restrictions for hosting this class of cryptographic source code on a
> publically-accessible server located in the United States?
The Debian project researched the situation a few years ago - with legal
assistance - and consequently decided to integrate crypto with their
main distribution, jump through a few hoops to notify the US government
about it, and stop maintaining their non-US crypto download site.
http://www.debian.org/legal/cryptoinmain has information.
Ross
--
Before posting, please read the FAQ: http://ecos.sourceware.org/fom/ecos
and search the list archive: http://ecos.sourceware.org/ml/ecos-discuss