Re: ppp 2.4.4 eap-tls patch

[James Cameron <james.cameron@hp.com>]

[-- Attachment #1: Type: text/plain, Size: 2007 bytes --]

On Tue, Jul 25, 2006 at 01:31:53PM +0200, Marco d'Itri wrote:
> On Jul 25, James Cameron <james.cameron@hp.com> wrote:
> > Is there any reason why you couldn't use MatrixSSL?
>
> I would hate to see EAP-TLS depend on a niche license.

MatrixSSL is dual licensed, and last I checked the GPL is quite common
rather than being niche.  It is unfortunate that it isn't LGPL, and
maybe that will stop the idea.

> I do not think I would enable EAP-TLS in the Debian package in this case
> since it would require pulling the MatrixSSL package in the base system.

Oh, certainly.  Debian already has OpenSSL.  Hopefully it would be a
build option to choose the appropriate dependency, and so the Debian
packaging would use the OpenSSL.

On Tue, Jul 25, 2006 at 05:17:33PM +0200, Jan Just Keijser wrote:
> - openwrt already provides support for openvpn, which in turn uses 
> openssl so why is there a need to switch to matrixssl ?

OpenWrt is used on embedded systems with very low memory, and the
OpenVPN package occasionally cannot be used because of the dependency on
OpenSSL (415183 bytes).  MatrixSSL is much smaller (41411 bytes), and is
already included in the base system for use by dropbear, the SSH
implementation.

> conclusion: for now, I won't be bothered to migrate my patch from 
> openssl to gnutls or matrixssl any time soon. Others are most welcome to 
> try , of course, and I am willing to test any patches that others provide.

No worries, I'll ponder it.

(I'm sensitive to the OpenSSL license because of the problems we had
getting an MPPE implementation accepted into the kernel.  An early
implementation used source fragments from OpenSSL.  The current
implementation does not use source from OpenSSL, but instead uses the
in-kernel crypto.)

-- 
James Cameron                         http://quozl.netrek.org/
HP Open Source, Volunteer             http://opensource.hp.com/
PPTP Client Project, Release Engineer http://pptpclient.sourceforge.net/

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]