From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-7.2 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1151EC4338F for ; Wed, 28 Jul 2021 20:07:14 +0000 (UTC) Received: from phobos.denx.de (phobos.denx.de [85.214.62.61]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 234FB604DB for ; Wed, 28 Jul 2021 20:07:13 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.1 mail.kernel.org 234FB604DB Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=konsulko.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=lists.denx.de Received: from h2850616.stratoserver.net (localhost [IPv6:::1]) by phobos.denx.de (Postfix) with ESMTP id 9DA8682D73; Wed, 28 Jul 2021 22:07:10 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=none (p=none dis=none) header.from=konsulko.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=u-boot-bounces@lists.denx.de Authentication-Results: phobos.denx.de; dkim=pass (1024-bit key; unprotected) header.d=konsulko.com header.i=@konsulko.com header.b="rN8KYX2R"; dkim-atps=neutral Received: by phobos.denx.de (Postfix, from userid 109) id 9090682D82; Wed, 28 Jul 2021 22:07:08 +0200 (CEST) Received: from mail-qv1-xf2f.google.com (mail-qv1-xf2f.google.com [IPv6:2607:f8b0:4864:20::f2f]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)) (No client certificate requested) by phobos.denx.de (Postfix) with ESMTPS id 6B8E682CDA for ; Wed, 28 Jul 2021 22:07:05 +0200 (CEST) Authentication-Results: phobos.denx.de; dmarc=none (p=none dis=none) header.from=konsulko.com Authentication-Results: phobos.denx.de; spf=pass smtp.mailfrom=trini@konsulko.com Received: by mail-qv1-xf2f.google.com with SMTP id d3so2205295qvq.6 for ; Wed, 28 Jul 2021 13:07:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=konsulko.com; s=google; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=N6b/kHKB2wJfW47o+h17MX4wm03jTI742S7hL6q2SZU=; b=rN8KYX2ReAucY8tLiRqFGl9AqlCPtjBItFG2uirJuY0/Zkj66Fc/oLERe4yobV+aP4 kfXAm2eVLLpPVvb43kU2I4tPN7r8rCnwXrJdmWSX7MrZUKyjnUYfTXvJuidCZXiAwKBZ ZqehkEz1UJF6ZOVjx6/phmWrUuaUGL+/gJJjA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=N6b/kHKB2wJfW47o+h17MX4wm03jTI742S7hL6q2SZU=; b=OuQ8QqPtv7PMmZ71rSzNeaTu1epV581vK0TubzHy8fSd9b5TK4mAoG59q1eIjZO6S5 6zSJ87w81HewAPMJSPuZPhsuqXhQxi2NWsn/+ouVHoZBKcpG15QO++V0iX5SmtcPJLKE zjT86zqPVjaFcJzy7Bl6bcsR5wZyOIiArlg4iFE5gm6o4cmQEnV3YXyi8RnW2vCJliWh NvCvRp3NvO01627RrY2BwUa1YhvDL3+PdqFGWX+nq8nrg9hpFQfzXWdb0Bp9pZYu976P 6gGPd2tUuLusZBsJVvpHZPPPDgL500j+dpTAQQ88xcYyDJANuaAsX3HhpZgqrwgoBHbv Aw9w== X-Gm-Message-State: AOAM533BgnW9B3GmRDOqd3sV63ZVd56Gq29nim9kXC3tn2gyaVR2qbYj jIZrspIns/nkcFGNtoVMrvwrbQ== X-Google-Smtp-Source: ABdhPJyl+9KRUvvbK6ZDS2cvzkz7BB+IeUgZ8QirvnexYgRFl9DlnNh3EUsO48nqBTRqpsgQaEdz8w== X-Received: by 2002:ad4:42a4:: with SMTP id e4mr1815061qvr.51.1627502824222; Wed, 28 Jul 2021 13:07:04 -0700 (PDT) Received: from bill-the-cat (2603-6081-7b01-cbda-3037-3a3d-435c-0707.res6.spectrum.com. [2603:6081:7b01:cbda:3037:3a3d:435c:707]) by smtp.gmail.com with ESMTPSA id r13sm378011qtt.38.2021.07.28.13.07.02 (version=TLS1_2 cipher=ECDHE-ECDSA-CHACHA20-POLY1305 bits=256/256); Wed, 28 Jul 2021 13:07:03 -0700 (PDT) Date: Wed, 28 Jul 2021 16:07:01 -0400 From: Tom Rini To: "Alex G." Cc: Artem Panfilov , "u-boot@lists.denx.de" Subject: Re: [PATCH 1/1] lib/ecdsa: Fix LibreSSL before v2.7.0 Message-ID: <20210728200701.GY9379@bill-the-cat> References: <20210728181023.25067-1-panfilov.artyom@gmail.com> <21fa035a-7ab5-7045-dd47-90670eb8be14@gmail.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="ufKotkMdkVlnDasC" Content-Disposition: inline In-Reply-To: <21fa035a-7ab5-7045-dd47-90670eb8be14@gmail.com> X-Clacks-Overhead: GNU Terry Pratchett User-Agent: Mutt/1.9.4 (2018-02-28) X-BeenThere: u-boot@lists.denx.de X-Mailman-Version: 2.1.34 Precedence: list List-Id: U-Boot discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: u-boot-bounces@lists.denx.de Sender: "U-Boot" X-Virus-Scanned: clamav-milter 0.103.2 at phobos.denx.de X-Virus-Status: Clean --ufKotkMdkVlnDasC Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Jul 28, 2021 at 03:00:44PM -0500, Alex G. wrote: > Hi Artem, >=20 > I'm re-adding the u-boot mailing list to the CC field, as I see your email > contains no sensitive information. >=20 > On 7/28/21 2:30 PM, Artem Panfilov wrote: > > We have broken CI builds on your bare-metal CentOS 7 servers with latest > > master. I think it is good reason to have=A0 a support. Our corporate > > clients have CentOS 7 too. >=20 > I thought we solved problems associated with bare builds on ancient OSes = by > using containerized builds. There's is CI infrastructure based on this on > source.denx.de that uses docker. As things change, and we eventually move= to > GNU TLS, a lot more things might break for old build hosts. I believe it's > worth looking at containerized builds. >=20 > Given that a solution exists for your problem, I think the argument for t= his > patch quite weak. There is a fine line at least that I'm willing to walk in terms of supporting ancient OSes directly and also not making things overly complicated in our own tree. That said, openssl tends to be one of the ones where it does get hard to support old versions. LibreSSL 2.7.5 was released December 15th, 2018 and is the end of the 2.7.x line it seems. I'm interested to hear what the case is where the right call is the say you're building modern software for real world use against such old libraries. --=20 Tom --ufKotkMdkVlnDasC Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAABCgAdFiEEGjx/cOCPqxcHgJu/FHw5/5Y0tywFAmEBuN4ACgkQFHw5/5Y0 tyw3oAv9E8M5HYjllIvjhGF+zj6NLtmLViZGtmpWECZuunojmCbF/iDncd+VRQTe h6u7gR6LZ5pGLY9cKr6nlac9mfgjxzLgU/re+dJBaLQItc28mkSQwBEBRNBu/lkb SoFsxuJdcYf3yVRTmQ2Sj9iruqMu5Wv/8K2m07Vn1pQmlD+8ki+Z8fn7YDH4GBni 586jWRhiMXePI/MvOTedP+90DqIHWHnQk93pv++uPJyJAclLOsOS8EGMlak3SDgS M/FojikJatlFboI5DV7rsNmjee8ryAwEn1ne2ly4KYOK+2+nnP1xIbUMoKwD1ux9 qigiCDkqjGwLUDG6rtl7WwaukVbIX7mmFBcHTt9gF8jRE5q/62HeaSfD1TRUeSEb MjmFjxQ311iTDzrab3rLo/O9R1GP7MLPD7vAgUxFgI7rxreka1TXDTJc7L4XzBAs iK7IYNd21lO4mypLQh9vob6587N1nBBp4lZEsqlST76omzEA75sqGnTMwURC0Ht1 K9BXSYFO =2+6u -----END PGP SIGNATURE----- --ufKotkMdkVlnDasC--