Bug#879459: git: please build against openssl with OPENSSL_SHA1=1

[Shawn Landden]

tag 879459 wontfix
On Sat, Oct 21, 2017 at 1:33 PM, Anders Kaseorg  wrote:

> Git’s builtin SHA-1 implementation has the advantage of trying to detect
> attempted collisions (https://github.com/cr-marcstevens/
> sha1collisiondetection), which seems like good thing to do by default
> these days.
>
> Furthermore, Debian does not ship GPL code linked with OpenSSL for license
> reasons (https://lintian.debian.org/tags/possible-gpl-code-linked-
> with-openssl.html).
>
> the cryptograms parts of openssl are under BSD-3 (although 6aa36e8e5a0 was
confused and didn't notive this)

> Anders
>

Bug#879459: git: please build against openssl with OPENSSL_SHA1=1

[Anders Kaseorg]

Git’s builtin SHA-1 implementation has the advantage of trying to detect 
attempted collisions 
(https://github.com/cr-marcstevens/sha1collisiondetection), which seems like 
good thing to do by default these days.

Furthermore, Debian does not ship GPL code linked with OpenSSL for license 
reasons 
(https://lintian.debian.org/tags/possible-gpl-code-linked-with-openssl.html).

Anders

Bug#879459: git: please build against openssl with OPENSSL_SHA1=1

[Shawn Landden]

Package: git
Version: 1:2.14.2-1
Severity: wishlist

Openssl's sha1 is much faster, ~25% even on this crusty 7 year old laptop. On 
new Intel and
all arm64 machines which have hardware acceleration openssl will be even more 
dramatically
faster.

shawn@t410s:~/git/git$ time git fsck
Checking object directories: 100% (256/256), done.
warning in tag d6602ec5194c87b0fc87103ca4d67251c76f233a: missingTaggerEntry: 
invalid format - expected 'tagger' line
Checking objects: 100% (235759/235759), done.
Checking connectivity: 234357, done.

real0m24.915s
user0m24.314s
sys 0m0.536s
shawn@t410s:~/git/git$ time ./git-fsck
Checking object directories: 100% (256/256), done.
warning in tag d6602ec5194c87b0fc87103ca4d67251c76f233a: missingTaggerEntry: 
invalid format - expected 'tagger' line
Checking objects: 100% (235759/235759), done.
Checking connectivity: 234357, done.

real0m21.264s
user0m20.695s
sys 0m0.548s




-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.13.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages git depends on:
ii  git-man  1:2.14.2-1
ii  libc62.24-17
ii  libcurl3-gnutls  7.55.1-1
ii  liberror-perl0.17025-1
ii  libexpat12.2.3-1
ii  libpcre2-8-0 10.22-3
ii  perl 5.26.0-8
ii  zlib1g   1:1.2.8.dfsg-5

Versions of packages git recommends:
ii  less 481-2.1
ii  openssh-client [ssh-client]  1:7.6p1-2
ii  patch2.7.5-1+b2

Versions of packages git suggests:
ii  gettext-base  0.19.8.1-4
pn  git-cvs   
pn  git-daemon-run | git-daemon-sysvinit  
pn  git-doc   
pn  git-el
ii  git-email 1:2.14.2-1
pn  git-gui   
pn  git-mediawiki 
pn  git-svn   
pn  gitk  
pn  gitweb

-- no debconf information