Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Thu, 9 May 2013 09:36:18 +0200
From: Daniel Cegiełka <>
Subject: Re: High-priority library replacements?

2013/5/9  <>:

> Tropicssl is a fork of polarssl, but as far as I can tell they haven't
> fixed CVEs 2013-0169, 2013-1621, and 2013-1622 yet.
> While I agree with their view of the license switch, the activity (or
> lack thereof) does not seem promising.

The problem is that we have the choice to either accept the GPL
(CyaSSL, PolarSSL) or write own implementation of a ssl from
scratch... or use eg tropicssl as a ssl base.

btw.  license issue - can we legally link noxcuse (GPL) with musl (MIT)? :)


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.