Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Crypto: drop support for Botan and OpenSSL variants #3391

Closed
petermax2 opened this issue Apr 10, 2020 · 6 comments · Fixed by #3395
Closed

Crypto: drop support for Botan and OpenSSL variants #3391

petermax2 opened this issue Apr 10, 2020 · 6 comments · Fixed by #3395
Assignees
Labels

Comments

@petermax2
Copy link
Member

The crypto plugin(s) consist(s) in variants with the following crypto libraries in use:

  • libgcrypt,
  • OpenSSL, and
  • Botan.

The variants have been introduced for academic research, which was finished in 2018. There is no other benefit of supporting several crypto libraries.

On the downside the maintenance effort of supporting the libraries mentioned above is increasing (e.g. #3385 ).

I think libgcrypt is the crypto library that best fits our needs (and has the nicest code-base). Also I do not expect the crypto library to cause increased maintenance effort.

Therefore I propose to drop the support of:

  • OpenSSL, and
  • Botan

and remove their corresponding compilation variants from the crypto plugin.

@petermax2 petermax2 self-assigned this Apr 10, 2020
@markus2330
Copy link
Contributor

I agree with the proposal!

@petermax2
Copy link
Member Author

petermax2 commented Apr 11, 2020

The implementation of this issue closes #3385 . Close #3385 .

@petermax2
Copy link
Member Author

I'll start with the implementation so we get a feeling if the clean-up improves the situation.

Please feel free to discuss the proposal above in the meantime.

@markus2330
Copy link
Contributor

Btw. there was also a maintenance issue with OpenSSL openwrt/packages#8998

So keeping only libgcrypt seems to be the perfect choice from maintenance point of view.

@haraldg: is this also ok for you? It seems like the openwrt package currently only uses OpenSSL?

Is it possible to build curl also with gcrypt so that the whole Elektra depends only on libgcrypt (and not OpenSSL)?

@mpranj
Copy link
Member

mpranj commented Apr 11, 2020

If there are no major functional differences I fully agree with maintaining only the best plugin variant. It's also great to drop some dependencies. I think you are in the best position to make the decision which plugin to keep @petermax2, but libgcrypt seems to be a good decision according to your work.

@petermax2
Copy link
Member Author

Is it possible to build curl also with gcrypt so that the whole Elektra depends only on libgcrypt (and not OpenSSL)?

Libgcrypt does not provide any TLS/SSL functions. I'm afraid you won't be able to build curl with gcrypt.

petermax2 added a commit to petermax2/libelektra that referenced this issue Apr 11, 2020
@petermax2 petermax2 mentioned this issue Apr 13, 2020
16 tasks
sanssecours pushed a commit to sanssecours/elektra that referenced this issue Apr 13, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants