Re: Disable OpenSSL

On Thu, Mar 27, 2025 at 10:15:14AM -0600, Todd C. Miller wrote:
>You can already disable OpenSSL via the --disable-openssl configure
>option.

I will never remember that ./configure --help mentions that 
--disable-foo is always available. Sorry.

>OpenSSL is used to support TLS connections to the sudo log
>server, sudo_logsrvd.  This is mainly used for remote storage of
>sudo session logs.

Debian doesn't ship logsrvd. We don't have the capacity to support that.

>Sudo ships with its own sha2 functions and can use those if not
>using OpenSSL or gcrypt.

So Debian's sudo package will not even lose functionality if we build 
with --disable-openssl --disable-wolfssl?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users