On Mon, 2021-09-13 at 08:56 +0200, Jakub Jelen wrote: > On 3/18/21 4:10 PM, Ben Cotton wrote: > > On Thu, Mar 18, 2021 at 10:06 AM Jakub Jelen <jjelen@xxxxxxxxxx> wrote: > > > > > > We need to strip these curves from upstream tarballs and it would be > > > great to have this resolved (in either way) rather sooner than later. > > > > > The Brainpool curves are not approved for use in Fedora at this time. > > Hi, > I wanted to bring up this topic once more again as it was suggested that > if the curves are build-time disabled we should be able to go around > without hobbling the source tarball. I proposed the following change to > libgcrypt to support build-time disabling brainpool curves and I wanted > to double-check if this approach is legally acceptable: Long-standing policy has been that anything which cannot be included for legal reasons must be stripped from the source tarballs, so no. -- Yaakov Selkowitz Senior Software Engineer - Platform Enablement Red Hat, Inc. _______________________________________________ legal mailing list -- legal@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to legal-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/legal@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure