On 08/20/2017 07:50 PM, Sérgio Basto wrote:
Hello,
I reopen or start thinking again on this question of enable elliptic
curves of openssl [1]
So going directly to the point, may I built all source of openssl in
copr [2] ? or at least some other curves that fedora package don't ship?
The curves and functionality which are disabled in the Fedora packages
of OpenSSL are done so for legal reasons.
The very nature of those "legal reasons" makes it difficult to be more
specific, as doing so could potentially expose Red Hat to increased
liability. I realize this is problematic, but it is the reality we have
to work with.
Red Hat is still liable for packages in coprs, so you cannot put a "all
source build" of openssl there.
However, I would ask if there is a specific curve that is not enabled in
OpenSSL that you need for a specific reason, please let me know, as I am
willing to look into the legal specifics around any justified cases to
see what we can do.
~tom