Hi Rainer

Am 21.06.19 um 12:36 schrieb Rainer Gerhards:
> El vie., 21 jun. 2019 a las 12:03, Michael Biebl (<bi...@debian.org>) 
> escribió:
>>
>> Control: severity -1  wishlist
>>
>> Am 21.06.19 um 10:40 schrieb Peter Viskup:
>>> Package: rsyslog
>>>
>>> Would it be possible to provide ossl rsyslog netstream driver as an package?
>>> It is missing and would be great to have possibilities to choose between
>>> two TLS drivers available (GnuTLS and OpenSSL).
>>> Tried to build the package version 8.1901 for Stretch with no issues.
>>
>> The important question is why?
>> What benefits does OpenSSL offer?
> 
> - much better error messages - on GnuTLS we can usually emit only very
> generic errors
> - much less picky in regard to certificate file - we very often had
> problems with GnuTLS here
> 
> Our current mainstream recommendation is to use the openssl route as
> it provides a much better user experience.


I see that parts of the code base are still GPL-3 (only) according to
their license headers.
And the combination GPL + OpenSSL is problematic afair, see
https://people.gnome.org/~markmc/openssl-and-the-gpl.html

Which is why avoided the use of OpenSSL where possible.

Regards,
Michael

-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to