2026-03-12 16:26 UTC
@jas@fosstodon.org So the OpenSSL repo now contains stuff that is not source⁈
How do distros like Debian deal with that?
@djc@hachyderm.io @kpcyrd@chaos.social
Replies (1)
-
@jas@fosstodon.org 2026-03-12 16:41
@civodul@toot.aquilenet.fr @djc@hachyderm.io @kpcyrd@chaos.social That would be OpenSSH, although I suspect modern OpenSSL may include similar stuff. Generated code like this is more common than most would want to admit. Debian sometime rebuild things, but in practice rely on upstreams being aligned on that. Debian include this generated file verbatim. Another concern is that ML-KEM is used under a patent license. My perception is that people are tired of caring about free software philosophy.