On 3/18/21 4:10 PM, Ben Cotton wrote:
On Thu, Mar 18, 2021 at 10:06 AM Jakub Jelen <jjelen@xxxxxxxxxx> wrote:
We need to strip these curves from upstream tarballs and it would be
great to have this resolved (in either way) rather sooner than later.
The Brainpool curves are not approved for use in Fedora at this time.
Hi,
I wanted to bring up this topic once more again as it was suggested that
if the curves are build-time disabled we should be able to go around
without hobbling the source tarball. I proposed the following change to
libgcrypt to support build-time disabling brainpool curves and I wanted
to double-check if this approach is legally acceptable:
https://dev.gnupg.org/T5520#149566
Thanks,
--
Jakub Jelen
Crypto Team, Security Engineering
Red Hat, Inc.
_______________________________________________
legal mailing list -- legal@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to legal-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/legal@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
