<html>
<head>
<base href="https://bugs.webkit.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - [GTK][EFL] CryptoDigest implementation depends on GnuTLS with LGPLv3+/GPLv2+ deps"
href="https://bugs.webkit.org/show_bug.cgi?id=162913#c3">Comment # 3</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - [GTK][EFL] CryptoDigest implementation depends on GnuTLS with LGPLv3+/GPLv2+ deps"
href="https://bugs.webkit.org/show_bug.cgi?id=162913">bug 162913</a>
from <span class="vcard"><a class="email" href="mailto:mcatanzaro@igalia.com" title="Michael Catanzaro <mcatanzaro@igalia.com>"> <span class="fn">Michael Catanzaro</span></a>
</span></b>
<pre>Note that we seem to agree that libgcrypt is the best option if we add a new dependency.
However, Zan notes that WTF has its own implementation of SHA-1, and we could probably roll our own SHA-2 as well, which together would be sufficient to replace all GnuTLS functionality used by CryptoDigest. This would probably be ideal.
We also considered mbed TLS (formerly Polar SSL), and discarded it as an option as it uses Apache license.
(In reply to <a href="show_bug.cgi?id=162913#c1">comment #1</a>)
<span class="quote">> - openssl</span >
>
<span class="quote">> * Apache license is not compatible with GPLv2, unless an exception is added
> by GPL users</span >
Note: the OpenSSL license is not compatible with GPLv2 unless the system library exception is used, and Debian has declined to declare OpenSSL a system library. OpenSSL is planning to change its license in the future to Apache v2, which is also not compatible with GPLv2.
(In reply to <a href="show_bug.cgi?id=162913#c2">comment #2</a>)
<span class="quote">> >no activity since 2010
>
> This is not true, look at git repository. It is very active</span >
libtomcrypt has activity in its git repository, but appears to have no releases since 2010. At least we failed to find them anywhere.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>