On Thu, Apr 23, 2020 at 01:09:42PM +0300, Adrian Bunk wrote: > So what is the way forward you suggest? > Asking someone (who?) for advice? > RC bug also against p11-kit? > ...???
It might be worth contacting OASIS on this issue, not sure. Maybe they would be willing to relicense or clarify licensing. I do think the current state of affairs is not great on any side and IMO p11-kit is surely also implicated. As to the Botan specific bug, possibly best course of action in near term is to simply remove the PKCS11 support, this can be done either at build time with flag --disable-modules=pkcs11 or at the source level by simply rm -rf src/lib/prov/pkcs11 then building as usual. I will look into some way for at build time to specify using some externally provided set of PKCS11 headers (from p11-kit or whatever) instead of the OASIS versions, but in best of circumstances that wouldn't be available until next release, in July. Jack