I was under the impression that we do link BoringSSL (but don't export the
symbols) with the CPython extension.

On Wed, May 17, 2017 at 12:35 PM Mohamed Koubaa <[email protected]>
wrote:

> Hello,
>
> My organization is using gRPC primarily with C++, Python, and C#, and we
> have a few challenges related to SSL.  We're under a restriction that we do
> not redistribute any ThirdParty code that has any CVE.  For this reason we
> cannot distribute OpenSSL 1.0.0 (we must use 1.1.0).
>
> We were able to build gRPC against OpenSSL 1.1.0 on both windows and linux
> using the patch from this github issue
> <https://github.com/grpc/grpc/issues/8801>, although many tests fail.
>  (Is there any version targeted to support this officially?)
>
> Another option would be to use BoringSSL.  AFAIK there are no CVEs against
> the version of BoringSSL that gRPC uses.  However, this could be
> challenging because we use OpenSSL with python for things other than gRPC.
> We won't be able to link both, so my question here is are there any known
> libraries/wrappers which use BoringSSL directly from CPython and are they
> swap-in replacements for the OpenSSL equivalent?
>
> Thanks!
> Mohamed Koubaa
> Software Developer
> ANSYS, Inc
>
> --
> You received this message because you are subscribed to the Google Groups "
> grpc.io" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at https://groups.google.com/group/grpc-io.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/grpc-io/CAJBOL5ttgWnFaq1G5y4ECon7Qe3yvvRE_gmmr-GscsD%2BX_xANQ%40mail.gmail.com
> <https://groups.google.com/d/msgid/grpc-io/CAJBOL5ttgWnFaq1G5y4ECon7Qe3yvvRE_gmmr-GscsD%2BX_xANQ%40mail.gmail.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"grpc.io" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/grpc-io.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/grpc-io/CAAvp3oPgz8uxFKFZ8pBTSjvwNyQC-BdX%3DZkvvZ%2B2go1v6WgcCA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to