There is discussion in the Debian bug of a patch by Mike Miller in late
2010 to replace the dependency on 'OpenSSL' with one on 'gnuTLS'.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=434599#49

which made its way to the git-devel mailing-list but seems to have
stalled.

http://marc.info/?l=git&m=128931540311518&w=2

The licenses for 'git' (GPLv2) and 'openssl' (BSD-like with advertising
clause) are incompatible:

http://lists.debian.org/debian-legal/2002/10/msg00113.html
http://people.gnome.org/~markmc/openssl-and-the-gpl.html

The 'git' package already uses 'gnuTLS' for other cryptographic services
and Mike Miller wrote his patch to use the gnutls-openssl compatibility
functions. However, there was no public API access to required functions
for MD5-CRAM authentication and it seems he stalled on the amount of
work required to get changes in libgcrypt that gnutls relied on for MD5
hashes and base64 encoding.

Since then gnutls has moved on, replacing its dependency on libgcrypt
with libnettle in 2.12.x. libnettle's API provides public access to
both:

MD5 - http://www.lysator.liu.se/~nisse/nettle/nettle.html#Hash-functions
base64 - http://www.lysator.liu.se/~nisse/nettle/nettle.html#Ascii-encoding

However, Debian and Ubuntu are still using libgnutls26 (gnutls
2.12.14+security patches) from late 2011 depending on libgcrypt.

If/once Debian and Ubuntu move to using a gnutls that depends on
libnettle it should allow us to push the git patches upstream and gain
TLS support in git-imap-send. The main problem is gnutls has changed its
license which would prevent any GPL v2 only applications/libraries that
currently depend on it from being linked against it. See:

http://lists.debian.org/debian-legal/2011/02/msg00006.html
https://lists.ubuntu.com/archives/ubuntu-devel/2012-July/035575.html

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/432786

Title:
  git imap-send ssl support

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/git/+bug/432786/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to