On Wed, 21 Oct 2020 09:34:53 +0100 Luca Boccassi <[email protected]> wrote: > On Tue, 2020-10-20 at 18:43 -0700, Vagrant Cascadian wrote: > > On 2020-10-19, Luca Boccassi wrote: > > > The FTP team revised their guidance related to OpenSSL linkage. It is > > > now considered a "system library", so it is now allowed to dynamically > > > link a GPL binary to libssl: > > > > > > http://meetbot.debian.net/debian-ftp/2020/debian-ftp.2020-03-13-20.02.html > > > https://salsa.debian.org/ftp-team/website/-/merge_requests/6 > > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=972181
> > > > Wow, this is a big surprise! > > > > Now we seem to have the absence of documentation about the issue, which > > seems a bit odd... given that this has been an issue in Debian for so > > long. > > Yes there was no direct communication as far as I can see, but the > REJECT FAQ has now been updated, and the OpenSSL + GPL paragraph is > gone, so it's as official as it can be: > > https://ftp-master.debian.org/REJECT-FAQ.html > > > > Please consider removing the override of CONFIG_FIT_SIGNATURE in > > > debian/rules to get signature supports in u-boot tools. > > > > > > MR opened on Salsa: > > > > > > https://salsa.debian.org/debian/u-boot/-/merge_requests/14 > > > > Thanks for the proposed update! > > > > > > Because the system library exception for GPL+openssl seems like a > > strange workaround to me... I did give a short attempt at switching > > u-boot over to wolfssl using the openssl compatibility layer, though it > > still needs a bit too much work to make the change at this point. > > > > > > Eventually I'll probably just merge your proposed changes... > > > > > > live well, > > vagrant > > Thanks - yeah I looked at that too in the past, but it was way too much > work. Given the new distro-wide policy, it seems much easier to just go > with it. Gentle ping - I'd really like to have this fixed in bullseye, which is approaching. It's one of the $day-job tools I have to rebuild locally exclusively due to this, and it's quite annoying :-) Any chance the MR could be merged before the freeze? Thanks! -- Kind regards, Luca Boccassi
signature.asc
Description: This is a digitally signed message part
