tech-misc archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Remove MKCRYPTO build option



(If this belongs on another mailing list, please redirect. I thought of putting it on tech-crypto but then the non-crypto people wouldn't have seen it! And I didn't want to cross-post to both tech-userlevel and tech-kern lists.)

The MKCRYPTO=no option was introduced long ago, when there were legal issues regarding the export of cryptographic code from the US.

Since that time, crypto code has become intertwined in all sorts of places, and it has become a herculean task to ensure that the option still permits 'build.sh release' to run to completion, whether or not the resulting build is actually useable (for some definition thereof).

Currently, build.sh will not complete (at least on port-amd64) due to references to openssl code in libbind, libdns, ntp, sntp, tcpdump, wpa/hostapd, and who knows what else! PR kern/51262 is opened to keep track of this problem...

It was suggested on icb/irc today that we should probably just remove the option completely. The export restrictions no longer apply, and there doesn't seem to be anyone able-and-willing to maintain the option.

Comments?


+------------------+--------------------------+------------------------+
| Paul Goyette     | PGP Key fingerprint:     | E-mail addresses:      |
| (Retired)        | FA29 0E3B 35AF E8AE 6651 | paul at whooppee.com   |
| Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd.org |
+------------------+--------------------------+------------------------+


Home | Main Index | Thread Index | Old Index