On Mon, 2021-09-13 at 08:56 +0200, Jakub Jelen wrote:
On 3/18/21 4:10 PM, Ben Cotton wrote:
> On Thu, Mar 18, 2021 at 10:06 AM Jakub Jelen <jjelen(a)redhat.com> wrote:
> >
> > We need to strip these curves from upstream tarballs and it would be
> > great to have this resolved (in either way) rather sooner than later.
> >
> The Brainpool curves are not approved for use in Fedora at this time.
Hi,
I wanted to bring up this topic once more again as it was suggested that
if the curves are build-time disabled we should be able to go around
without hobbling the source tarball. I proposed the following change to
libgcrypt to support build-time disabling brainpool curves and I wanted
to double-check if this approach is legally acceptable:
Long-standing policy has been that anything which cannot be included for legal
reasons must be stripped from the source tarballs, so no.
--
Yaakov Selkowitz
Senior Software Engineer - Platform Enablement
Red Hat, Inc.