Re: git-fetch in 1.5.4 fails versus 1.5.3.8

On Thu, Feb 07, 2008 at 10:42:15AM -0800, Linus Torvalds wrote:

For crazy people who think that regular libraries can change the copyright 
status of a program (not so), you can always decide to build without 
OpenSSL and use the included Mozilla-based SHA1 implementation for git.

FWIW, this is not about OpenSSL for SHA1; it is about the underlying
library used by curl to do SSL (gnutls vs openssl). And the problem is
that curl linked against gnutls seems _broken_, so Anand has asked if
Debian can ship a binary git linked against a curl that is linked
against openssl (and the answer is probably "no, Debian people think
that is wrong").

-Peff