Re: [LEDE-DEV] Uniform cryptography library

2017-12-12 Thread Matthias-Christian Ott
On 2017-12-12 01:12, Moritz Warning wrote: > On 12/11/2017 07:10 PM, Matthias-Christian Ott wrote: > [..] >> Do you think it would be worth the effort to unify the cryptography >> libraries in LEDE? > > This sounds like a huge task. It is and needs a conscious commit

[LEDE-DEV] Stateless /etc/passwd, /etc/group, ...

2017-12-11 Thread Matthias-Christian Ott
Recently I did a sysupgrade on an older OpenWRT system and upgraded it to LEDE. I had the problem that there was no dnsmasq user because /etc/passwd is in /lib/upgrade/keep.d/base-files-essential and sysupgrade does not merge them. I thought a bit about how to improve this. There is a NSS module c

[LEDE-DEV] Uniform cryptography library

2017-12-11 Thread Matthias-Christian Ott
Packages use several cryptography libraries because different packages require different libraries. hostapd uses OpenSSL, dnsmasq Nettle and ustream-ssl can use multiple libraries for example. In itself this is also not a major problem. We could unify all packages to use a single cryptography libr