On Út, 2013-12-03 at 18:46 +0100, Jan Včelák wrote:
Hello list.
What is the current status of Crypto Consolidation in Fedora? Is it still
current and is the page up to date [1]?
The page is mostly up to date.
In CZ.NIC, we are considering a switch of cryptography backend for
our
authoritative DNS server Knot DNS. And we take interest in current
tendencies in bleeding edge distros. ;-)
I'd suggest to follow the "Medium term goals" from the page. That means
to choose the backend from one of the following libraries (in the order
of preference).
1. NSS
2. GNUTLS (with nettle as crypto backend, but nettle never used
directly by applications)
3. OpenSSL
4. libgcrypt
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb
(You'll never know whether the road is wrong though.)