On Thu, Dec 11, 2014 at 07:18:16PM +0100, Jan Alexander Steffens wrote: > On Wed, Dec 10, 2014 at 10:46 PM, Gaetan Bisson <[email protected]> wrote: > > I'd like to move gnutls and its dependencies (libtasn1, nettle, p11-kit) > > to [core] so gnupg can link against it; that'll enable HKPS support. > > p11-kit and its dependency libtasn1 have already been moved as they > are dependencies of ca-certificates-utils. >
... > Furthermore, nss and its dependencies nspr and sqlite have been moved > as ca-certificates-mozilla is a dependency of ca-certificates. (This > also opens up the possibility of building curl against nss). SSL/TLS implementations are not 100% exchangeable in libcurl. Building against NSS could cause *interesting* side effects: http://curl.haxx.se/libcurl/c/CURLOPT_SSL_CIPHER_LIST.html
