Hi,

> I've put together an OpenSSL 0.9.6h package using GNU autoconf, available
> from:
>         http://site.rpi-acm.org/info/openssl/
> 

This is surely great, but I find it unfair/inappropriate that no
information whatsoever is provided on

- how does the content of this package differs from the official
distribution (support for OSes other than Unix is stripped);
- toolkit being not MT-safe [when compiled];
- different installation procedure (original INSTALL file is kept);
- different self-test procedure (is there any at all? test programs
don't get even compiled);
- that performance is not a concern (e.g. on IA-32 your package performs
2-3-4 times poorer than properly configured official version, key
algorithms such as des, md5, sha1, rsa, dsa);

The page says "Currently known to compile and pass checks for:" I failed
to figure out what does "pass checks" mean (see above). I probably have
to object to the fact that original README is kept intact. In particular
I don't find it fair that openssl team is listed as the only one
accounted for bugs/problems. At the very least when it comes to compile
and installation problems of this package it's completely unsupported...

In other words you should make it *clear* how is the package different
and so that users understand it:-)

Cheers. A.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to