From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/3306 Path: news.gmane.org!not-for-mail From: Rich Felker Newsgroups: gmane.linux.lib.musl.general Subject: Re: High-priority library replacements? Date: Thu, 9 May 2013 10:08:52 -0400 Message-ID: <20130509140852.GJ20323@brightrain.aerifal.cx> References: <20130429215500.GJ12689@port70.net> <20130430021014.GC20323@brightrain.aerifal.cx> <20130430083516.GK12689@port70.net> <20130508230022.GA14297@Caracal> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Trace: ger.gmane.org 1368108547 726 80.91.229.3 (9 May 2013 14:09:07 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Thu, 9 May 2013 14:09:07 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-3310-gllmg-musl=m.gmane.org@lists.openwall.com Thu May 09 16:09:07 2013 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1UaRWs-0002tj-Sx for gllmg-musl@plane.gmane.org; Thu, 09 May 2013 16:09:06 +0200 Original-Received: (qmail 8141 invoked by uid 550); 9 May 2013 14:09:05 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 8133 invoked from network); 9 May 2013 14:09:05 -0000 Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Xref: news.gmane.org gmane.linux.lib.musl.general:3306 Archived-At: On Thu, May 09, 2013 at 09:36:18AM +0200, Daniel Cegiełka wrote: > 2013/5/9 : > > > Tropicssl is a fork of polarssl, but as far as I can tell they haven't > > fixed CVEs 2013-0169, 2013-1621, and 2013-1622 yet. > > > > While I agree with their view of the license switch, the activity (or > > lack thereof) does not seem promising. > > The problem is that we have the choice to either accept the GPL > (CyaSSL, PolarSSL) or write own implementation of a ssl from > scratch... or use eg tropicssl as a ssl base. > > btw. license issue - can we legally link noxcuse (GPL) with musl (MIT)? :) Of course; otherwise musl would be rather useless since there's a huge corpus of GPL code you want to link and run. The point of a permissive license is that it does not restrict you from doing things like this. BTW, I'll probably relicense noxcuse anyway. I just never got around to doing much/anything with it after initially publishing it. The main app in it that's really useful right now though is iconv, since Busybox lacks iconv and glibc iconv is glibc-specific. Rich