From mboxrd@z Thu Jan  1 00:00:00 1970
From: Paolo Bonzini <pbonzini@redhat.com>
Date: Thu, 16 May 2019 19:57:56 +0200
Subject: [U-Boot] RSA in U-Boot
In-Reply-To: <CADg8p96SiOJe+QT9-EUnrwW7FHiYp=w8PFQ7yUAoNb32aWEzHg@mail.gmail.com>
References: <20190318021712.GC9937@linaro.org>
 <20190425021223.GH7158@linaro.org>
 <99c1f624-be7f-b6ab-10be-420129670dbf@csgraf.de>
 <747471f3-4490-bfe7-7369-68846f2b4ea3@redhat.com>
 <422971965.15677087.1556343097301.JavaMail.zimbra@redhat.com>
 <4b32b851-181e-5846-c5b0-17cadae06f33@gmx.de>
 <CADg8p96SiOJe+QT9-EUnrwW7FHiYp=w8PFQ7yUAoNb32aWEzHg@mail.gmail.com>
Message-ID: <9eebfa22-931c-75db-7d22-bb5db6635190@redhat.com>
List-Id: <u-boot.lists.denx.de>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
To: u-boot@lists.denx.de

On 16/05/19 09:23, Sughosh Ganu wrote:
>=20
>     > It's also license-incompatible with U-Boot's GPLv2 I think.=C2=A0 I=
 guess
>     > grub can use it because GPLv3 and Apache v2 can be combined just fi=
ne.
>     > Reusing Linux's code seems like the best match.
>     >
>     > Paolo
>     >
>=20
>     You could have a look at GnuTLS available at
>     https://gitlab.com/gnutls/gnutls/ .
>=20
>     PKCS7 is supported, cf.
>     https://www.gnutls.org/manual/html_node/PKCS-7-API.html
>=20
>     There seem to be four main contributors to GnuTLS adding two patches
>     a day:
>     https://github.com/gnutls/gnutls/graphs/contributors?from=3D2018-04-2=
8&to=3D2019-04-27&type=3Da
>=20
>=20
> There is LibreSSL as well which is a fork of openssl. Guess that too
> should be fine.

LibreSSL has the same license issue (i.e. it's GPLv3-compatible but
GPLv2-incompatible) as OpenSSL.

Paolo