NetBSD Problem Report #10883

Received: (qmail 25526 invoked from network); 23 Aug 2000 01:50:38 -0000
Message-Id: <200008230148.e7N1mhK27567@itojun.org>
Date: Wed, 23 Aug 2000 10:48:43 +0900 (JST)
From: itojun@itojun.org
Reply-To: itojun@itojun.org
To: gnats-bugs@gnats.netbsd.org
Cc: thorpej@netbsd.org
Subject: MKCRYPTO_{RC5,IDEA} should be set to "no" by default
X-Send-Pr-Version: 3.95

>Number:         10883
>Category:       lib
>Synopsis:       MKCRYPTO_{RC5,IDEA} should be set to "no" by default
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    itojun
>State:          closed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Aug 23 01:51:00 +0000 2000
>Closed-Date:    Sat Oct 07 01:28:16 +0000 2000
>Last-Modified:  Sun Dec 17 13:37:36 +0000 2000
>Originator:     Jun-ichiro itojun Hagino
>Release:        1.5E
>Organization:
	itojun.org
>Environment:


>Description:
	src/crypto/Makefile.openssl uses MKCRYPTO_{IDEA,RC5,RSA} to control
	inclusion of patented algorithms into /usr/lib/libcrypto.a.
	it seems that those functions are compiled in by default.
	wouldn't this make it harder for us to ship intellectural-property-
	rights clean system by default?  is it really okay to ship them?
>How-To-Repeat:
	% nm /usr/lib/libcrypto.a | grep -i rc5
	% nm /usr/lib/libcrypto.a | grep -i idea
	% less src/crypto/Makefile.openssl
>Fix:
	change Makefile.openssl so that it won't include IDEA and RC5
	by default.  for example,
.if !(defined(MKCRYPTO_RC5) && ${MKCRYPTO_RC5} == "YES")
CPPFLAGS+=-DNO_RC5
.endif

	RSA patent will expire soon, so it should be okay to leave MKCRYPTO_RSA
	undefined.  (not sure about RSA patent in non-US countries... in
	Japan, there's no RSA patent)
>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: lib-bug-people->core 
Responsible-Changed-By: fair 
Responsible-Changed-When: Thu Sep 7 13:59:45 PDT 2000 
Responsible-Changed-Why:  
This is an intellectual property question, best dealt with by Core. 
Responsible-Changed-From-To: core->itojun 
Responsible-Changed-By: itojun 
Responsible-Changed-When: Tue Sep 12 19:40:35 PDT 2000 
Responsible-Changed-Why:  
i'm looking at it.  
policy issue should be discussed in core@netbsd 
State-Changed-From-To: open->feedback 
State-Changed-By: itojun 
State-Changed-When: Fri Sep 29 17:24:55 PDT 2000 
State-Changed-Why:  
main trunc is fixed with libcrypto_{idea,rc5} 
State-Changed-From-To: feedback->closed 
State-Changed-By: itojun 
State-Changed-When: Fri Oct 6 18:28:05 PDT 2000 
State-Changed-Why:  
pulled up to 1.5 
>Unformatted:

Home	PR Database Search