Re: Patch to add "chacha20" option to OpenSSL package

[coypu%SDF.ORG@localhost]

On Wed, Feb 15, 2017 at 01:20:33AM +0000, Timshel Knoll-Miller wrote:
> [Please CC any replies to me - I'm not on this list]
> 
> Hi to anyone responsible for the pkgsrc OpenSSL package,
> 
> I've created a patch to the pkgsrc openssl package which I use locally to
> build openssl with support for the ChaCha20/Poly1305 cipher. This works by
> including a 3rd-party patch backported from OpenSSL 1.1, which was
> originally produced by CloudFlare.
> 
> I'm attaching the patch in the hope that you may be willing to upstream it!
> Let me know if there is anything you'd like me to change or improve with
> the patch.
> 

Hi, Timshel.

Normally that would be welcome with open arms, but openssl is
a security-sensitive package, and I imagine others would also
agree that we should avoid deviating from upstream code for that
reason.

We should provide OpenSSL 1.1, though! That'd also provide those
ciphers.

Sorry, and thanks for the effort.