On Aug 10, 2010, at 6:46 AM, Pinto Elia wrote:

>  patch -p0 <<'@@ .'
>  Index: rpm/rpmio/rpmpgp.c
>  ============================================================================
>  $ cvs diff -u -r2.123 -r2.124 rpmpgp.c
>  --- rpm/rpmio/rpmpgp.c       23 Jun 2010 06:47:29 -0000      2.123
>  +++ rpm/rpmio/rpmpgp.c       10 Aug 2010 10:46:40 -0000      2.124
>  @@ -47,12 +47,12 @@
>   #elif defined(USE_CRYPTO_TOMCRYPT) && defined(WITH_TOMCRYPT)
>       &rpmltcImplVecs;
>       /* implict selection (order DOES matter) */
>  +#elif defined(WITH_NSS)
>  +    &rpmnssImplVecs;
>   #elif defined(WITH_BEECRYPT)
>       &rpmbcImplVecs;
>   #elif defined(WITH_GCRYPT)
>       &rpmgcImplVecs;
>  -#elif defined(WITH_NSS)
>  -    &rpmnssImplVecs;
>   #elif defined(WITH_SSL)
>       &rpmsslImplVecs;
>   #elif defined(WITH_CDSA)
>  @@ .

This change is actually peripheral to NSS FIPS 140-2 enabling. I had
added for the specific customer Just In Case.

BeeCrypt is still faster than NSS, and performance (not FIPS 140-2) is
still the criteria for choosing the default crypto.

No worries, I'll revert when I get there.

73 de Jeff

______________________________________________________________________
RPM Package Manager                                    http://rpm5.org
Developer Communication List                        rpm-devel@rpm5.org

Reply via email to