From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.71) id 1XVj07-0004it-KH for mharc-grub-devel@gnu.org; Sun, 21 Sep 2014 11:24:35 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:55677) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XVj01-0004hu-7Z for grub-devel@gnu.org; Sun, 21 Sep 2014 11:24:34 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XVizv-0005KV-OD for grub-devel@gnu.org; Sun, 21 Sep 2014 11:24:29 -0400 Received: from mail-we0-x235.google.com ([2a00:1450:400c:c03::235]:54255) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XVizv-0005JG-Hu for grub-devel@gnu.org; Sun, 21 Sep 2014 11:24:23 -0400 Received: by mail-we0-f181.google.com with SMTP id q59so1770065wes.12 for ; Sun, 21 Sep 2014 08:24:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type; bh=QMArFFXY/Zy48fq3RUNgidLP1ID6PvzwYaQ98kB0KPA=; b=Jqb1HZDVIhWxX6YQjCQwcOM31SMkeykjmcGvB+2+JBHYzUcRm7BrOhSF8DcwD+Rw9G EnwuIJB96GXsgd+MwSnUVn6Emn/hwulF12bkzC+eGbhU7TB3lPRDqa0KuC24nk+J4XD2 yGvcv9L7U5hqhMzi2X4aXjFyRKy8YqE6sVKxLJqNd9+2oC5yNN5hTaCY8CGn/0M30hdg 5Sec7ErPy09bwcpJz0BKi5kH87n1QQcgiLc65J9aiu7vKLuUw3YmEf99lHcFlEUiEaP/ 1OOW45OVyp0I1qkz+ntdwin9THzCoIdyEPEO4PGp58yJhEr14x+Cu70Z+M1rqNL9OYE9 ko0A== X-Received: by 10.180.186.230 with SMTP id fn6mr9793041wic.44.1411313057249; Sun, 21 Sep 2014 08:24:17 -0700 (PDT) Received: from [192.168.42.4] (160-228.197-178.cust.bluewin.ch. [178.197.228.160]) by mx.google.com with ESMTPSA id uk7sm9188684wjc.34.2014.09.21.08.24.14 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 21 Sep 2014 08:24:16 -0700 (PDT) Message-ID: <541EED9B.4090103@gmail.com> Date: Sun, 21 Sep 2014 17:24:11 +0200 From: =?UTF-8?B?VmxhZGltaXIgJ8+GLWNvZGVyL3BoY29kZXInIFNlcmJpbmVua28=?= User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Icedove/31.0 MIME-Version: 1.0 To: The development of GNU GRUB Subject: Re: Has anyone integrate openSSL into GRUB? References: <5404C175.3090601@gmail.com> In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="G5OCpqdCEXkD9bU90E98P8ls6fxaKa03X" X-detected-operating-system: by eggs.gnu.org: Error: Malformed IPv6 address (bad octet value). X-Received-From: 2a00:1450:400c:c03::235 X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list Reply-To: The development of GNU GRUB List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Sep 2014 15:24:34 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --G5OCpqdCEXkD9bU90E98P8ls6fxaKa03X Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 20.09.2014 00:17, Mat Troi wrote: > Thank you for bringing up the licensing issue. It would have been a > waste of time developing it and then can't use it. I think our group i= s > going to pursue the gnuTLS route. If anyone has experienced in > integrating gnuTLS or any other library into GRUB2, please let me know.= =20 > Thanks. As I said, unless you can propose and implement good entropy gathering and PRNG design for GRUB I strongly oppose integrating gnutls as it doesn't do any protection in this setup and only gives false sense of security. >=20 > On Mon, Sep 1, 2014 at 11:56 AM, Vladimir '=CF=86-coder/phcoder' Serbin= enko > > wrote: >=20 > On 30.08.2014 00:55, Mat Troi wrote: > > Hi, > > > > Just wondering if anyone has tried to integrate openSSL into GRUB= ? > > > It's possible to integrate GnuTLS in GRUB. It may even appear to wo= rk. > But without good entropy source SSL/TLS is as good as xoring with > 49686176656e6f6964656161626f757463727970746f > > Thanks, > > Matt > > > > > > _______________________________________________ > > Grub-devel mailing list > > Grub-devel@gnu.org > > https://lists.gnu.org/mailman/listinfo/grub-devel > > >=20 >=20 >=20 > _______________________________________________ > Grub-devel mailing list > Grub-devel@gnu.org > https://lists.gnu.org/mailman/listinfo/grub-devel >=20 >=20 >=20 >=20 > _______________________________________________ > Grub-devel mailing list > Grub-devel@gnu.org > https://lists.gnu.org/mailman/listinfo/grub-devel >=20 --G5OCpqdCEXkD9bU90E98P8ls6fxaKa03X Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iF4EAREKAAYFAlQe7ZsACgkQmBXlbbo5nOubkwD8COhCN1wsiUNT4c3zMw6TFTZX FkiVjlSOQkjGmGyOkfwA/0gCNrKBR32hRf3oIEPovn18bd+oOiMa+JG/cLyO7V8A =A/Ti -----END PGP SIGNATURE----- --G5OCpqdCEXkD9bU90E98P8ls6fxaKa03X--