Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-09 Thread Dave Taht
On Wed, Apr 9, 2014 at 11:11 AM, Olaf Westrik wrote: > Simon, > > >> Don't underestimate the contribution of all the people who take >> responsibility for the software that runs as root, or exposed to the >> net, on your machines. It's something I have nightmares about. > > > I do hope that is not

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-09 Thread Olaf Westrik
Simon, Don't underestimate the contribution of all the people who take responsibility for the software that runs as root, or exposed to the net, on your machines. It's something I have nightmares about. I do hope that is not true and that you sleep well. So much better to be rested and clear h

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-09 Thread Dave Taht
On Wed, Apr 9, 2014 at 10:29 AM, Simon Kelley wrote: > On 09/04/14 15:51, Dave Taht wrote: > >> >> My heart bleeds for the openssl folk and openssl derived application users >> right now. More investment into creating, maintaining and improving >> core crypto libraries is desperately needed to hol

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-09 Thread Simon Kelley
On 09/04/14 15:51, Dave Taht wrote: > > My heart bleeds for the openssl folk and openssl derived application users > right now. More investment into creating, maintaining and improving > core crypto libraries is desperately needed to hold our civilization together. > +1 Don't underestimate the

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-09 Thread Dave Taht
On Wed, Apr 9, 2014 at 6:24 AM, /dev/rob0 wrote: > On Tue, Apr 01, 2014 at 11:54:28AM -0500, I wrote: > ^^ >> On Tue, Mar 25, 2014 at 07:08:44PM -0400, Alex Xu wrote: >> > On 25/03/14 07:03 PM, sven falempin wrote: >> > > my concern of nettle vs openssl is the amount of review and >> >

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-09 Thread /dev/rob0
On Tue, Apr 01, 2014 at 11:54:28AM -0500, I wrote: ^^ > On Tue, Mar 25, 2014 at 07:08:44PM -0400, Alex Xu wrote: > > On 25/03/14 07:03 PM, sven falempin wrote: > > > my concern of nettle vs openssl is the amount of review and > > > testing nettle did get compared to something more wide

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Simon Kelley
On 01/04/14 19:14, Nathan Dorfman wrote: > With such superior understanding, shouldn't you be adding OpenSSL support > to dnsmasq yourself? That way you can deal with their byzantine API and the > resulting bugs, and Simon can instead do something actually worthwhile. > > But don't do that before

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread /dev/rob0
On Tue, Apr 01, 2014 at 10:45:44AM -0700, Dave Taht wrote: > And thus I enthusiastically support other OSes than linux, > other dns servers besides bind, and other crypto libraries > besides openssl. One named to rule them all One named to find them One named to bring them all And in the darkness

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Nathan Dorfman
With such superior understanding, shouldn't you be adding OpenSSL support to dnsmasq yourself? That way you can deal with their byzantine API and the resulting bugs, and Simon can instead do something actually worthwhile. On Tue, Apr 1, 2014 at 2:07 PM, Brad Smith wrote: > On 01/04/14 2:02 PM,

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Brad Smith
On 01/04/14 2:02 PM, Nathan Dorfman wrote: Maybe OpenSSL is the right choice anyway, I don't know. But, I thought someone should speak up for nettle :) speaking up for nettle means nothing when you don't understand the issue at hand. -- This message has been scanned for viruses and dangerous c

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Nathan Dorfman
On Tue, Apr 1, 2014 at 12:54 PM, /dev/rob0 wrote: > a I can't speak to an actual code audit, but nettle isn't some third-rate clone. It's a mature, actively developed and (importantly) thoroughly documented project. If I were to undertake such an audit however, I would surely prefer to have t

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Brad Smith
On 01/04/14 1:45 PM, Dave Taht wrote: On Tue, Apr 1, 2014 at 9:54 AM, /dev/rob0 wrote: On Tue, Mar 25, 2014 at 07:08:44PM -0400, Alex Xu wrote: On 25/03/14 07:03 PM, sven falempin wrote: my concern of nettle vs openssl is the amount of review and testing nettle did get compared to something m

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread Dave Taht
On Tue, Apr 1, 2014 at 9:54 AM, /dev/rob0 wrote: > On Tue, Mar 25, 2014 at 07:08:44PM -0400, Alex Xu wrote: >> On 25/03/14 07:03 PM, sven falempin wrote: >> > my concern of nettle vs openssl is the amount of review and >> > testing nettle did get compared to something more widely(!) >> > used >> >

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-04-01 Thread /dev/rob0
On Tue, Mar 25, 2014 at 07:08:44PM -0400, Alex Xu wrote: > On 25/03/14 07:03 PM, sven falempin wrote: > > my concern of nettle vs openssl is the amount of review and > > testing nettle did get compared to something more widely(!) > > used > > something being used a lot != something being good Ab

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-26 Thread Simon Kelley
On 26/03/14 09:16, Olaf Westrik wrote: > On 2014-03-25 23:22, Lonnie Abelbeck wrote: >> >> On Mar 25, 2014, at 4:52 PM, Simon Kelley wrote: >>> >>> Do you want openSSL instead of Nettle? If so, why? >>> >>> Cheers, >>> >>> Simon. >> >> I would prefer OpenSSL support. >> >> As a developer for a cros

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-26 Thread Olaf Westrik
I happen to be in a similar position as Lonnie. Since we use packages that use OpenSSL (Apache, OpenVPN, wget, Perl SSLeay), we already ship the openssl libraries and not nettle. Sorry, forgot to list sshd. Olaf ___ Dnsmasq-discuss mailing list Dns

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-26 Thread Weedy
On 26 Mar 2014 05:53, "Albert ARIBAUD" wrote: > > Le 26/03/2014 10:16, Olaf Westrik a écrit : > >> On 2014-03-25 23:22, Lonnie Abelbeck wrote: >>> >>> >>> On Mar 25, 2014, at 4:52 PM, Simon Kelley wrote: Do you want openSSL instead of Nettle? If so, why? Cheers,

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-26 Thread Albert ARIBAUD
Le 26/03/2014 10:16, Olaf Westrik a écrit : On 2014-03-25 23:22, Lonnie Abelbeck wrote: On Mar 25, 2014, at 4:52 PM, Simon Kelley wrote: Do you want openSSL instead of Nettle? If so, why? Cheers, Simon. I would prefer OpenSSL support. As a developer for a cross-compiled x86 open source p

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-26 Thread Olaf Westrik
On 2014-03-25 23:22, Lonnie Abelbeck wrote: On Mar 25, 2014, at 4:52 PM, Simon Kelley wrote: Do you want openSSL instead of Nettle? If so, why? Cheers, Simon. I would prefer OpenSSL support. As a developer for a cross-compiled x86 open source project (AstLinux) building and maintaining a

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread Alex Xu
On 25/03/14 07:03 PM, sven falempin wrote: > my concern of nettle vs openssl is the amount of review and testing > nettle did get compared to something more widely(!) used something being used a lot != something being good signature.asc Description: OpenPGP digital signature ___

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread sven falempin
On Tue, Mar 25, 2014 at 6:39 PM, Simon Kelley wrote: > On 25/03/14 22:22, Lonnie Abelbeck wrote: >> >> On Mar 25, 2014, at 4:52 PM, Simon Kelley wrote: >> >>> On 25/03/14 21:25, Lonnie Abelbeck wrote: Is the decision to not support OpenSSL shared libraries a final decision, or

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread Simon Kelley
On 25/03/14 22:22, Lonnie Abelbeck wrote: > > On Mar 25, 2014, at 4:52 PM, Simon Kelley wrote: > >> On 25/03/14 21:25, Lonnie Abelbeck wrote: >>> >>> >>> Is the decision to not support OpenSSL shared libraries a final >>> decision, or is there a chance you may reconsider ? >>> >> >> The very

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread Lonnie Abelbeck
On Mar 25, 2014, at 4:52 PM, Simon Kelley wrote: > On 25/03/14 21:25, Lonnie Abelbeck wrote: >> >> >> Is the decision to not support OpenSSL shared libraries a final decision, or >> is there a chance you may reconsider ? >> > > The very early DNSSEC code used openSSL, so it's possible. The r

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread Alex Xu
On 25/03/14 05:52 PM, Simon Kelley wrote: > Do you want openSSL instead of Nettle? If so, why? Because it's quote-unquote more secure. signature.asc Description: OpenPGP digital signature ___ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelle

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread Simon Kelley
On 25/03/14 21:25, Lonnie Abelbeck wrote: > > > Is the decision to not support OpenSSL shared libraries a final decision, or > is there a chance you may reconsider ? > The very early DNSSEC code used openSSL, so it's possible. The reason for the change (in no particular order) was 1) the API is

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread Lonnie Abelbeck
On Mar 25, 2014, at 4:13 PM, Simon Kelley wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 25/03/14 14:43, Alex Xu wrote: >> I'm writing the Gentoo ebuild for dnsmasq 2.69rc1 >> (https://bugs.gentoo.org/show_bug.cgi?id=504154), and I was >> wondering if dnsmasq requires nettle an

Re: [Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread Simon Kelley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 25/03/14 14:43, Alex Xu wrote: > I'm writing the Gentoo ebuild for dnsmasq 2.69rc1 > (https://bugs.gentoo.org/show_bug.cgi?id=504154), and I was > wondering if dnsmasq requires nettle and gmp, or actually > nettle[gmp]. > > The latter builds nettl

[Dnsmasq-discuss] Does DNSSEC require nettle and gmp, or nettle with gmp?

2014-03-25 Thread Alex Xu
I'm writing the Gentoo ebuild for dnsmasq 2.69rc1 (https://bugs.gentoo.org/show_bug.cgi?id=504154), and I was wondering if dnsmasq requires nettle and gmp, or actually nettle[gmp]. The latter builds nettle with --enable-public-key. signature.asc Description: OpenPGP digital signature __