Bug#362754: [Pkg-openssl-devel] Bug#362754: Removal of RC5 and MDC2 algorithms is not clearly documented

2006-04-15 Thread Kurt Roeckx
On Sat, Apr 15, 2006 at 01:23:06PM +0300, Ilya Konstantinov wrote:
 Package: libssl0.9.8
 
 Version: 0.9.8a-8
 
 
 Although the library is modified from its default form of including RC5 
 and MDC2, there's no README describing those changes clearly to 
 developers. This is very problematic since the removal of the algorithms 
 modifies the library's exported functions.

idea is also disabled.

Note that all of them have been removed since 0.9.6b-3 (in 2001)
because of patent problems.  You really can't say that we
modified the library's exported functions, since it never had
them in the first place.  They only existed in non-us, in a
library with different soname.

But maybe we should document this somewhere.


Kurt



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#362754: [Pkg-openssl-devel] Bug#362754: Removal of RC5 and MDC2 algorithms is not clearly documented

2006-04-15 Thread Ilya Konstantinov

Kurt Roeckx wrote:


Note that all of them have been removed since 0.9.6b-3 (in 2001)
because of patent problems.  You really can't say that we
modified the library's exported functions, since it never had
them in the first place.  They only existed in non-us, in a
library with different soname.
  

Oh, you seem to be right about non-US.

But maybe we should document this somewhere.

  


I've given you some ideas where I'd expect to find such documentation. I 
wonder if it's possible to replace those missing exports (like 
EVP_rc5_32_12_16_cbc) with something that causes the linker to print an 
explanation message, just like inherently-unsafe libc functions 
(tempnam, mktemp?) do.


For an example of how to do it, please see:
http://gcc.gnu.org/ml/java/2005-04/msg00160.html


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]