GNU bug report logs - #77825
our git linked with openssl, license is incompatible

Previous Next

Package: guix;

Reported by: Greg Hogan <code <at> greghogan.com>

Date: Tue, 15 Apr 2025 14:11:01 UTC

Severity: normal

To reply to this bug, email your comments to 77825 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to bug-guix <at> gnu.org:
bug#77825; Package guix. (Tue, 15 Apr 2025 14:11:01 GMT) Full text and rfc822 format available.

Acknowledgement sent to Greg Hogan <code <at> greghogan.com>:
New bug report received and forwarded. Copy sent to bug-guix <at> gnu.org. (Tue, 15 Apr 2025 14:11:01 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Greg Hogan <code <at> greghogan.com>
To: Z572 <z572 <at> z572.online>
Cc: guix-devel <at> gnu.org, bug-guix <at> gnu.org
Subject: Re: our git linked with openssl, license is incompatible
Date: Tue, 15 Apr 2025 10:09:33 -0400
On Tue, Apr 15, 2025 at 4:38 AM Z572 <z572 <at> z572.online> wrote:
>
> see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094969

Should we follow Debian's lead and close this bug?




Information forwarded to bug-guix <at> gnu.org:
bug#77825; Package guix. (Thu, 01 May 2025 11:50:02 GMT) Full text and rfc822 format available.

Message #8 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Efraim Flashner <efraim <at> flashner.co.il>
To: Greg Hogan <code <at> greghogan.com>
Cc: guix-devel <at> gnu.org, Z572 <z572 <at> z572.online>, bug-guix <at> gnu.org
Subject: Re: our git linked with openssl, license is incompatible
Date: Thu, 1 May 2025 14:48:58 +0300
[Message part 1 (text/plain, inline)]
On Tue, Apr 15, 2025 at 10:09:33AM -0400, Greg Hogan wrote:
> On Tue, Apr 15, 2025 at 4:38 AM Z572 <z572 <at> z572.online> wrote:
> >
> > see https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1094969
> 
> Should we follow Debian's lead and close this bug?

I followed the debian bug at the time and I checked our version of git.
We have openssl integrated in several places in git (specifically in
cyrus-sasl) where gnutls wasn't a drop-in replacement. I think it would
be nice to be able to use gnutls instead of openssl in more places but
I'm willing to follow Debian's lead here.

-- 
Efraim Flashner   <efraim <at> flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
[signature.asc (application/pgp-signature, inline)]

Information forwarded to bug-guix <at> gnu.org:
bug#77825; Package guix. (Thu, 01 May 2025 15:01:02 GMT) Full text and rfc822 format available.

Message #11 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Felix Lechner <felix.lechner <at> lease-up.com>
To: Greg Hogan <code <at> greghogan.com>
Cc: guix-devel <at> gnu.org, Z572 <z572 <at> z572.online>, bug-guix <at> gnu.org
Subject: Re: our git linked with openssl, license is incompatible
Date: Thu, 01 May 2025 07:59:53 -0700
Hi Efraim,

On Thu, May 01 2025, Efraim Flashner wrote:

> gnutls wasn't a drop-in replacement

wolfSSL could be such a "drop-in" replacement. [1] Their OpenSSL
compatibility layer became popular when OpenSSL lost their FIPS rating
for a little while, but I ported software to it long before.

wolfSSL was once the captive TLS library for MySQL.  Excluded from
Orca's acquisition of MySQL, they struck out on their own.  wolfSSL is
popular in the embedded space, especially in cars and washing machines.

Kind regards
Felix

[1] https://www.wolfssl.com/wolfssl-supports-git/




This bug report was last modified 13 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.