Date: Thu, 15 May 2003 17:57:21 +0300 From: Ruslan Ermilov <ru@freebsd.org> To: Dag-Erling Smorgrav <des@ofug.org> Cc: arch@freebsd.org Subject: Re: NOCRYPT / NOSECURE Message-ID: <20030515145721.GA68695@sunbay.com> In-Reply-To: <xzpr870mgvb.fsf@flood.ping.uio.no> References: <xzpr870mgvb.fsf@flood.ping.uio.no>
next in thread | previous in thread | raw e-mail | index | archive | help
--Q68bSM7Ycu6FN28Q Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, May 15, 2003 at 04:20:08PM +0200, Dag-Erling Smorgrav wrote: > I just tried to run a tinderbox with NOCRYPT and NOSECURE (but not > NO_OPENSSL) defined. It failed because there are Makefiles > (games/factor was the one that broke the build, but glimpse(1) tells > me there are others) which check NO_OPENSSL and / or NOCRYPT but not > NOSECURE. >=20 > NOSECURE is a meaningless subset of NOCRYPT. It means "don't descend > into src/secure", but that's equivalent to NOCRYPT because a) we don't > descend into src/secure if NOCRYPT is set and b) the only significant > stuff which NOCRYPT disables but NOSECURE doesn't is Kerberos, which > requires OpenSSL, which isn't built in the NOSECURE case, so there's > no way we can build world with NOSECURE but not NOCRYPT. >=20 > I would therefore like to remove NOSECURE, preferably before 5.1. >=20 I'm all for it. I tired of fixing all these NOCRYPT/NOSECURE/NO_OPENSSL/NO_OPENSSH combinations. Please go ahead. > NO_OPENSSL is also a subset of NOCRYPT. There is so little that > builds with NO_OPENSSL but not with NOCRYPT that I think it might be > worthwhile to deprecate NO_OPENSSL and change the description of > NOCRYPT from "will prevent building of crypt versions" to "do not > build crypto-related software" >=20 I'm not so sure about NO_OPENSSL. --=20 Ruslan Ermilov Sysadmin and DBA, ru@sunbay.com Sunbay Software AG, ru@FreeBSD.org FreeBSD committer, +380.652.512.251 Simferopol, Ukraine http://www.FreeBSD.org The Power To Serve http://www.oracle.com Enabling The Information Age --Q68bSM7Ycu6FN28Q Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD4DBQE+w6rRUkv4P6juNwoRAtMIAJjx08ViyNax/w0ejKZkOJlYmz+JAJ0YLALE gXKbTGXe2ixqkf6t7m8QbA== =8heB -----END PGP SIGNATURE----- --Q68bSM7Ycu6FN28Q--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20030515145721.GA68695>