Bug#928744: u-boot: add support for the Turris Omnia and other OpenSSL reqiring hardware
On Fri, 10 May 2019 15:08:43 +0800 Paul Wise wrote: On Thu, 2019-05-09 at 23:45 -0700, Vagrant Cascadian wrote: > I've thought about this as well... I've been hesitant to implement it > wondering how it would interact with the NEW queue... Only one way to find out :) > Ideally, of course, would be to fix upstream to not require OpenSSL Indeed, even with OpenSSL moving to Apache 2.0, which is compatible with GPLv3 (and thus GPLv2+), OpenSSL 3.0 will still be incompatible with the GPLv2-only code in u-boot. With #972513, OpenSSL support for the u-boot-tools was added, so it should be possible now to build the requested binary packages.
Bug#928744: u-boot: add support for the Turris Omnia and other OpenSSL reqiring hardware
On Thu, 2019-05-09 at 23:45 -0700, Vagrant Cascadian wrote: > I've thought about this as well... I've been hesitant to implement it > wondering how it would interact with the NEW queue... Only one way to find out :) > Ideally, of course, would be to fix upstream to not require OpenSSL Indeed, even with OpenSSL moving to Apache 2.0, which is compatible with GPLv3 (and thus GPLv2+), OpenSSL 3.0 will still be incompatible with the GPLv2-only code in u-boot. -- bye, pabs https://wiki.debian.org/PaulWise signature.asc Description: This is a digitally signed message part
Bug#928744: u-boot: add support for the Turris Omnia and other OpenSSL reqiring hardware
On 2019-05-10, Paul Wise wrote: > Please add support to the u-boot source package for building u-boot > binary packages for the Turris Omnia and other hardware where u-boot > requires OpenSSL. As I understand it, these binary packages are not > redistributable by Debian but folks could build or cross-build them > themselves for deployment on their own hardware. That's my understanding, yes. > By using dpkg's build profiles support, those packages could be added > to the u-boot source package, not be built by default but still be > able to be manually buildable using the dpkg-buildpackage > --build-profiles option. I've thought about this as well... I've been hesitant to implement it wondering how it would interact with the NEW queue... if needed I guess a workaround would be to add them to the "u-boot" package, though it's not available on all architectures, and might violate "A binary package must contain the exact same content for all profiles with which it builds" And now that we've opened the discussion... Ideally, of course, would be to fix upstream to not require OpenSSL due to the incompatibility with GPL and port to another library that was GPL-compatible... in theory it's not a lot of code. I briefly tried looking into the GNU TLS OpenSSL compatibility layer, but it did not support the needed functionality. I also brought this issue up in Guix recently, but eventually just submitted a patch to remove OpenSSL from the u-boot packaging much like Debian already does: https://issues.guix.info/issue/34717 Some past discussion upstream: https://lists.denx.de/pipermail/u-boot/2017-November/312483.html https://lists.denx.de/pipermail/u-boot/2017-December/313616.html https://lists.denx.de/pipermail/u-boot/2017-December/313742.html It didn't seem like a licensing exception was plausible upstream, as u-boot is codebase with a lot of individual contributors over the years... live well, vagrant signature.asc Description: PGP signature
Bug#928744: u-boot: add support for the Turris Omnia and other OpenSSL reqiring hardware
Source: u-boot Severity: wishlist Please add support to the u-boot source package for building u-boot binary packages for the Turris Omnia and other hardware where u-boot requires OpenSSL. As I understand it, these binary packages are not redistributable by Debian but folks could build or cross-build them themselves for deployment on their own hardware. By using dpkg's build profiles support, those packages could be added to the u-boot source package, not be built by default but still be able to be manually buildable using the dpkg-buildpackage --build-profiles option. https://wiki.debian.org/BuildProfileSpec -- bye, pabs https://wiki.debian.org/PaulWise signature.asc Description: This is a digitally signed message part
