tech-misc archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Remove MKCRYPTO build option
(If this belongs on another mailing list, please redirect. I thought of
putting it on tech-crypto but then the non-crypto people wouldn't have
seen it! And I didn't want to cross-post to both tech-userlevel and
tech-kern lists.)
The MKCRYPTO=no option was introduced long ago, when there were legal
issues regarding the export of cryptographic code from the US.
Since that time, crypto code has become intertwined in all sorts of
places, and it has become a herculean task to ensure that the option
still permits 'build.sh release' to run to completion, whether or not
the resulting build is actually useable (for some definition thereof).
Currently, build.sh will not complete (at least on port-amd64) due to
references to openssl code in libbind, libdns, ntp, sntp, tcpdump,
wpa/hostapd, and who knows what else! PR kern/51262 is opened to keep
track of this problem...
It was suggested on icb/irc today that we should probably just remove
the option completely. The export restrictions no longer apply, and
there doesn't seem to be anyone able-and-willing to maintain the option.
Comments?
+------------------+--------------------------+------------------------+
| Paul Goyette | PGP Key fingerprint: | E-mail addresses: |
| (Retired) | FA29 0E3B 35AF E8AE 6651 | paul at whooppee.com |
| Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd.org |
+------------------+--------------------------+------------------------+
Home |
Main Index |
Thread Index |
Old Index