Bug#362754: [Pkg-openssl-devel] Bug#362754: Removal of RC5 and MDC2 algorithms is not clearly documented
On Sat, Apr 15, 2006 at 01:23:06PM +0300, Ilya Konstantinov wrote: Package: libssl0.9.8 Version: 0.9.8a-8 Although the library is modified from its default form of including RC5 and MDC2, there's no README describing those changes clearly to developers. This is very problematic since the removal of the algorithms modifies the library's exported functions. idea is also disabled. Note that all of them have been removed since 0.9.6b-3 (in 2001) because of patent problems. You really can't say that we modified the library's exported functions, since it never had them in the first place. They only existed in non-us, in a library with different soname. But maybe we should document this somewhere. Kurt -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Bug#362754: [Pkg-openssl-devel] Bug#362754: Removal of RC5 and MDC2 algorithms is not clearly documented
Kurt Roeckx wrote: Note that all of them have been removed since 0.9.6b-3 (in 2001) because of patent problems. You really can't say that we modified the library's exported functions, since it never had them in the first place. They only existed in non-us, in a library with different soname. Oh, you seem to be right about non-US. But maybe we should document this somewhere. I've given you some ideas where I'd expect to find such documentation. I wonder if it's possible to replace those missing exports (like EVP_rc5_32_12_16_cbc) with something that causes the linker to print an explanation message, just like inherently-unsafe libc functions (tempnam, mktemp?) do. For an example of how to do it, please see: http://gcc.gnu.org/ml/java/2005-04/msg00160.html -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]