Re: Fedora, DNSSEC and GOST (ECC like) algorithms with openssl

2010-06-24 Thread Dmitry Butskoy
Tom "spot" Callaway wrote: > On 06/21/2010 12:05 PM, Paul Wouters wrote: > >> On Mon, 21 Jun 2010, Tomas Mraz wrote: >> >> I would be great if we could change the spec file to have a proper flag to enable/disable GOST/ECC so that people can easilly rebuild with GOST support i

Re: Fedora, DNSSEC and GOST (ECC like) algorithms with openssl

2010-06-24 Thread Paul Wouters
On Thu, 24 Jun 2010, Tom "spot" Callaway wrote: >>> This is not possible as the ECC algorithm sources are removed from the >>> source tarball prior to adding it to the Fedora CVS. >> >> Would it still be possible to have the define with a comment to grab the >> source outside the CVS repo? I am ju

Re: Fedora, DNSSEC and GOST (ECC like) algorithms with openssl

2010-06-24 Thread Tom "spot" Callaway
On 06/21/2010 12:05 PM, Paul Wouters wrote: > On Mon, 21 Jun 2010, Tomas Mraz wrote: > >>> I would be great if we could change the spec file to have a proper flag >>> to enable/disable GOST/ECC so that people can easilly rebuild with GOST >>> support if they need to (and it is legal for them). Wou

Re: Fedora, DNSSEC and GOST (ECC like) algorithms with openssl

2010-06-21 Thread Bruno Wolff III
On Mon, Jun 21, 2010 at 11:07:05 -0400, Paul Wouters wrote: > > Some references showing there should not be any known IPR issues filed > with the IETF that would prevent implementing RFC standards using ECC: DJB has made some public comments on why he doesn't think any patents apply to ECC wor

Re: Fedora, DNSSEC and GOST (ECC like) algorithms with openssl

2010-06-21 Thread Paul Wouters
On Mon, 21 Jun 2010, Tomas Mraz wrote: >> I would be great if we could change the spec file to have a proper flag >> to enable/disable GOST/ECC so that people can easilly rebuild with GOST >> support if they need to (and it is legal for them). Would that be >> legally possible? > This is not possi

Re: Fedora, DNSSEC and GOST (ECC like) algorithms with openssl

2010-06-21 Thread Tomas Mraz
On Mon, 2010-06-21 at 11:07 -0400, Paul Wouters wrote: > On Mon, 21 Jun 2010, Tomas Mraz wrote: > > > Looking at it more closely actually for the DNSSEC GOST R 34.10-2001 it > > will not be possible to include it as it is elliptic curve based and all > > the ECC code is removed from our Openssl s

Fedora, DNSSEC and GOST (ECC like) algorithms with openssl

2010-06-21 Thread Paul Wouters
On Mon, 21 Jun 2010, Tomas Mraz wrote: > Looking at it more closely actually for the DNSSEC GOST R 34.10-2001 it > will not be possible to include it as it is elliptic curve based and all > the ECC code is removed from our Openssl source and build. I do not know > much about the ECC except it is a