On 2017-12-12 01:12, Moritz Warning wrote:
> On 12/11/2017 07:10 PM, Matthias-Christian Ott wrote:
> [..]
>> Do you think it would be worth the effort to unify the cryptography
>> libraries in LEDE?
>
> This sounds like a huge task.
It is and needs a conscious commit
Recently I did a sysupgrade on an older OpenWRT system and upgraded it
to LEDE. I had the problem that there was no dnsmasq user because
/etc/passwd is in /lib/upgrade/keep.d/base-files-essential and
sysupgrade does not merge them. I thought a bit about how to improve this.
There is a NSS module c
Packages use several cryptography libraries because different packages
require different libraries. hostapd uses OpenSSL, dnsmasq Nettle and
ustream-ssl can use multiple libraries for example. In itself this is
also not a major problem.
We could unify all packages to use a single cryptography libr