From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.3 required=3.0 tests=BAYES_00,DKIM_ADSP_CUSTOM_MED, DKIM_INVALID,DKIM_SIGNED,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,NICE_REPLY_A,SPF_HELO_NONE, SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id C24B4C4338F for ; Wed, 28 Jul 2021 23:07:31 +0000 (UTC) Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 478BB6101B for ; Wed, 28 Jul 2021 23:07:31 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org 478BB6101B Authentication-Results: mail.kernel.org; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=lists.denx.de Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 6CF1F82DEC; Thu, 29 Jul 2021 01:07:01 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=fail (p=none dis=none) header.from=gmail.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=fail reason="signature verification failed" (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b="eCBUOalt"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id BDA7682D82; Thu, 29 Jul 2021 00:29:44 +0200 (CEST) Received: from mail-lf1-x134.google.com (mail-lf1-x134.google.com [IPv6:2a00:1450:4864:20::134]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id EB40282D73 for ; Thu, 29 Jul 2021 00:29:37 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=panfilov.artyom@gmail.com Received: by mail-lf1-x134.google.com with SMTP id f18so6859834lfu.10 for ; Wed, 28 Jul 2021 15:29:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=sender:subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding:content-language; bh=kCDqoYevhWTufYCz+0O2iBFUyE046bPQPlgvtu4m6kw=; b=eCBUOaltr25UBvBjqszIqkFYaKz8LZQPnB9qalnbes0HkRhZ66K+QW5jP6HIEDUI2P HYkvbI8vZp8CySMkqIB3XznnrJgy1wuCUaRTlyr4AknKmcn1i9bFZxbfAXwf9nghJOFi /rYnGWaYVuUC0Ay1WHG4XhMO+Vq9bFiVAJFbLSzI01Aa5FL1XDVGJa6RbLYUcXBhY5f1 w5WiSdAqS8wy/5QXZVfAn7Cz6hAgMA7fgjYW+C844psRtBUxja3JG/W/s9/zGyHK6ZE7 fuf93ny64C6uVt7CZjEkGNc38ga03ZcNZItPwmEBewZor5+xf+3DIKwffvLMqP/ovsZe aI3g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:subject:to:cc:references:from:message-id :date:user-agent:mime-version:in-reply-to:content-transfer-encoding :content-language; bh=kCDqoYevhWTufYCz+0O2iBFUyE046bPQPlgvtu4m6kw=; b=HJAZA2BjiQRQKGU+cLbLohltGrqHl4XEU+j6jp69WvQZewCpBD5TFanaFUljnSYIOF JvewoEj1YHMbkeQoQKb1mWuL4P1bGsxPGfRPV0ZuFN0011tZvtAR4en9TTEe7V+vkZxq IzTOq12KiBHB1AeJIvjJdMPWbOKauFoJ6VmAziuR+n+yn68LHPcq7Xvt1GVj5pFDRPYy PWM6a/2oEU5cnbDS0BTcbYYCAcMWTdzaJq2xdbM+Ycu1o8ECRO9RhTiTdvLCmnlSsuk4 uSYol61jsrv5ipAT+GDaXU+X9caeDeqKa0aF/hj5j/gexi00XCA7pHdavnNVW+IKG2NP cwWQ== X-Gm-Message-State: AOAM532hAKsi3ns3I7W4a8U+bCEl8Dy5t3k7cqFUhnfwau7UC3uiceUd olwlBywUCmyoy00ErXgO3wJjvnDumWOms0xgOQbf7A== X-Google-Smtp-Source: ABdhPJx2fJN8QOOzpmCfAvIKBnWWGxX/2zxyvQte5DS2thUinQ3sr4lwWn6s+Qw3lG8t6+mfw5gVtw== X-Received: by 2002:ac2:5e66:: with SMTP id a6mr1298279lfr.304.1627511376746; Wed, 28 Jul 2021 15:29:36 -0700 (PDT) Received: from [192.168.1.124] ([31.134.188.128]) by smtp.gmail.com with ESMTPSA id r16sm118122lfm.91.2021.07.28.15.29.36 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 28 Jul 2021 15:29:36 -0700 (PDT) Subject: Re: [PATCH 1/1] lib/ecdsa: Fix LibreSSL before v2.7.0 To: Tom Rini , "Alex G." Cc: "u-boot@lists.denx.de" References: <20210728181023.25067-1-panfilov.artyom@gmail.com> <21fa035a-7ab5-7045-dd47-90670eb8be14@gmail.com> <20210728200701.GY9379@bill-the-cat> From: Artem Panfilov Message-ID: <34cdf0ed-c97d-e5ec-31ff-24e4ca085c4d@gmail.com> Date: Thu, 29 Jul 2021 01:29:35 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.11.0 MIME-Version: 1.0 In-Reply-To: <20210728200701.GY9379@bill-the-cat> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Content-Language: en-US X-Mailman-Approved-At: Thu, 29 Jul 2021 01:05:15 +0200 X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.34 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.2 at phobos.denx.de X-Virus-Status: Clean On 28.07.2021 23:07, Tom Rini wrote: > There is a fine line at least that I'm willing to walk in terms of > supporting ancient OSes directly and also not making things overly > complicated in our own tree. That said, openssl tends to be one of the > ones where it does get hard to support old versions. LibreSSL 2.7.5 was > released December 15th, 2018 and is the end of the 2.7.x line it seems. > > I'm interested to hear what the case is where the right call is the say > you're building modern software for real world use against such old > libraries. Hi Tom, I have a specific test case where I test if it's still possible to build upstream master u-boot on our infrastructure (progression testing). I also test runtime on our boards. I understand that nowadays everyone uses docker container, but ​we have limited docker nodes right now on our site. If you don't want to support OpenSSL < 1.1.0 and do not test it, then I suggest dropping it all over the tree because it doesn't make sense and looks misleading with such a partial solution. Best regards, Artem