|
Message-ID: <CAPLrYERWt3wjXtB92NUA6skQ2Q8jneMYzHEp3U_N_TUoBS8a1g@mail.gmail.com> Date: Thu, 9 May 2013 09:36:18 +0200 From: Daniel Cegiełka <daniel.cegielka@...il.com> To: musl@...ts.openwall.com Subject: Re: High-priority library replacements? 2013/5/9 <idunham@...abit.com>: > Tropicssl is a fork of polarssl, but as far as I can tell they haven't > fixed CVEs 2013-0169, 2013-1621, and 2013-1622 yet. > > While I agree with their view of the license switch, the activity (or > lack thereof) does not seem promising. The problem is that we have the choice to either accept the GPL (CyaSSL, PolarSSL) or write own implementation of a ssl from scratch... or use eg tropicssl as a ssl base. btw. license issue - can we legally link noxcuse (GPL) with musl (MIT)? :) Daniel
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.