Julian Sikorski wrote:
> Germany uses their own implementation too:
> https://src.fedoraproject.org/rpms/AusweisApp2
> To add insult to injury, it requires the use of custom EC curves, which
> are bound to stop working at any moment:
> https://bugzilla.redhat.com/show_bug.cgi?id=2259403

At which point you should probably just bundle a static OpenSSL with 
AusweisApp2. As unfortunate as it is, there appears to be little other 
choice to keep the package running here, and bundling forked libraries is no 
longer against Fedora packaging guidelines. And there are other packages 
already bundling forked versions of OpenSSL (e.g., Chromium and derivatives 
all bundle some version of "BoringSSL").

And at least the German stuff (and the Italian, Portuguese, and Estonian 
ones) is Free Software. The Austrian ID Austria app is entirely proprietary. 
Though, as far as I know, you can buy physical FIDO2 hardware, then go 
register that with the ID Austria office, and then log in on the ID Austria 
website with any FIDO2 enabled browser and the hardware you bought. But the 
default workflow goes through a proprietary smartphone app.

        Kevin Kofler

-- 
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to