Bug#971367: [debian-mysql] Bug#971367: Bug#971367: mariadb-10.5 should not embed wolfssl

2020-09-29 Thread Otto Kekäläinen
Hello! > Thank you for the background. Let me detail on the security side. The > issue is not with using wolfssl. The issue is with using a bundled ssl > library. Doing so means that a single bug in wolfssl must be uploaded > several times in order to fix it. I think it would be ok to use the > sy

Bug#971367: [debian-mysql] Bug#971367: Bug#971367: mariadb-10.5 should not embed wolfssl

2020-09-29 Thread Otto Kekäläinen
Switching to OpenSSL 3.0 would remove the license issue (as 3.0 is Apache licensed), but it is still alpha and in experimental only. https://packages.debian.org/source/experimental/openssl I've suggested upstream they would support system WolfSSL but it hasn't been a priority so far and I am not