RPM Community Forums

Mailing List Message of <rpm-devel>

Re: Which of beecrypt/nss/openssl as default?

From: Jeff Johnson <n3npq@mac.com>
Date: Sat 24 May 2008 - 18:42:54 CEST
Message-id: <4A142AD9-B741-4780-BC1D-B1506EE47B7F@mac.com>

On May 24, 2008, at 12:32 PM, devzero2000 wrote:

> Not what you have asked - I think that the best information source  
> could come at the moment from Ralf with the huge multiplatform  
> support, OS and compiler, of openpkg - but  I have found this  
> reference, in some way related  to the original question,  
> interesting and perhaps useful for the discussion (https:// 
> admin.fedoraproject.com/wiki/FedoraCryptoConsolidation). Sure the  
> goal are different.
>

Very different goals. I'm interested in highest performing crypto as  
default. If one prefers
FIPS 140 certified crypto instead, change the default. One size does  
not fit all criteria ...

> (aside) why this reference cite rpm 4.4.2.x as one to nss enable   
> is  a mistery for me - probably i miss something - as for instance  
> this link says the contrary apparently https://bugzilla.redhat.com/ 
> show_bug.cgi?id=444389
>

The initialization for NSS is different (and much earlier) in  
rpm-4.4.2.3.4.5.6.
This leads to SIGPIPE handler being changed before the pipe is setup.

rpm-5.x initializes NSS lazily later, and so --pipe setup is  
unaffected by using NSS.

73 de Jeff
Received on Sat May 24 18:45:06 2008
Driven by Jeff Johnson and the RPM project team.
Hosted by OpenPKG and Ralf S. Engelschall.
Powered by FreeBSD and OpenPKG.