[erlang-patches] elliptic curve support

[Andreas Schultz]

----- Original Message -----
> 2012/10/18 Andreas Schultz <aschultz@REDACTED>:
> > Hi,
> >
> > Here is the elliptic curve support rebased to master-pu.
> >
> > https://github.com/RoadRunnr/otp/compare/master-pu...tls-ecc-suites
> > https://github.com/RoadRunnr/otp/compare/master-pu...tls-ecc-suites.patch
> 
> Could you, please, make them switchable (something like --with-ec-ssl
> or with #ifdef..#endif)? Otherwise this is a no-go addon for all US
> Linux distributions due to software patents.

"all US Linux distributions" is a bit strong, it seems that only Redhat/Fedora
is disabling EC (https://bugzilla.redhat.com/show_bug.cgi?id=319901), Debian
and its cousins have it enabled.
Also, RFC6090 (http://tools.ietf.org/html/rfc6090#section-9) claims that it is
not patented.

Anyhow since Erlang should build everywhere and ciphers could be disable
for a myriad of other reasons, I'm going to work something out. A simple
#ifdef in crypto.c will not enough, SSL will have to filter the supported
cipher suites as well.

Andreas

> --
> With best regards, Peter Lemenkov.
> 

-- 
-- 
Dipl. Inform.
Andreas Schultz