Hi,

File .../trunk/perl-modules/core/trunk/OpenXPKI.xs
has explicit reference to file openssl/ec.h
which controls elliptic curves algorithms in openssl.
This means that openxpki would not run, if this file is not present in a
system.

But nowadays ec algorithms are sometimes believed to fall under some
patents, and thus several project (Scientific Linux and CentOS for sure,
and maybe RedHat?) have choosen to exclude ec from their openssl
packages. Even from "devel" versions of the openssl package.

Thus requirement to have ec.h prerequisite seems too rigid for openxpki,
which can happily exist without ec.

Do you think that use of ec could be made optional in openxpki?

Regards, Sergei

------------------------------------------------------------------------------
The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE:
Pinpoint memory and threading errors before they happen.
Find and fix more than 250 security defects in the development cycle.
Locate bottlenecks in serial and parallel code that limit performance.
http://p.sf.net/sfu/intel-dev2devfeb
_______________________________________________
OpenXPKI-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-devel

Reply via email to