Re: [I] [C++] Bundled AWS compiles own version of BoringSSL [arrow]

2025-11-25 Thread via GitHub


pitrou commented on issue #48240:
URL: https://github.com/apache/arrow/issues/48240#issuecomment-3574247876

   Oh, thanks for the pointer. I had no idea that it was deliberate. As long as 
AWS-LC is properly maintained then why not, but it's a bit concerning to have 
different crypto libraries bundled in Arrow (with possibly varying levels of 
robustness).


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



Re: [I] [C++] Bundled AWS compiles own version of BoringSSL [arrow]

2025-11-24 Thread via GitHub


kou commented on issue #48240:
URL: https://github.com/apache/arrow/issues/48240#issuecomment-3573578758

   It's AWS-LC:
   
   https://github.com/aws/aws-lc
   
   >  AWS-LC is a general-purpose cryptographic library maintained by the AWS 
Cryptography team for AWS and their customers. It іs based on code from the 
Google BoringSSL project and the OpenSSL project.
   
   AWS-LC is used by other AWS libraries.
   
   BTW, what is the real problem you want to share? We should not use BoringSSL 
because it's not intended for general use?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



Re: [I] [C++] Bundled AWS compiles own version of BoringSSL [arrow]

2025-11-24 Thread via GitHub


pitrou commented on issue #48240:
URL: https://github.com/apache/arrow/issues/48240#issuecomment-3571567261

   Also according to https://boringssl.googlesource.com/boringssl :
   
   > Although BoringSSL is an open source project, it is not intended for 
general use, as OpenSSL is.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]



Re: [I] [C++] Bundled AWS compiles own version of BoringSSL [arrow]

2025-11-24 Thread via GitHub


pitrou commented on issue #48240:
URL: https://github.com/apache/arrow/issues/48240#issuecomment-3571547555

   @kou 


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]