tech-misc archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Remove MKCRYPTO build option
(If this belongs on another mailing list, please redirect.  I thought of 
putting it on tech-crypto but then the non-crypto people wouldn't have 
seen it!  And I didn't want to cross-post to both tech-userlevel and 
tech-kern lists.)
The MKCRYPTO=no option was introduced long ago, when there were legal 
issues regarding the export of cryptographic code from the US.
Since that time, crypto code has become intertwined in all sorts of 
places, and it has become a herculean task to ensure that the option 
still permits 'build.sh release' to run to completion, whether or not 
the resulting build is actually useable (for some definition thereof).
Currently, build.sh will not complete (at least on port-amd64) due to 
references to openssl code in libbind, libdns, ntp, sntp, tcpdump, 
wpa/hostapd, and who knows what else!  PR kern/51262 is opened to keep 
track of this problem...
It was suggested on icb/irc today that we should probably just remove 
the option completely.  The export restrictions no longer apply, and 
there doesn't seem to be anyone able-and-willing to maintain the option.
Comments?
+------------------+--------------------------+------------------------+
| Paul Goyette     | PGP Key fingerprint:     | E-mail addresses:      |
| (Retired)        | FA29 0E3B 35AF E8AE 6651 | paul at whooppee.com   |
| Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd.org |
+------------------+--------------------------+------------------------+
Home |
Main Index |
Thread Index |
Old Index