On Thu, 7 Feb 2008, Jeff King wrote:
FWIW, this is not about OpenSSL for SHA1; it is about the underlying
library used by curl to do SSL (gnutls vs openssl).
My comment was about claiming "not distributable". That was simply not
true. It's perfectly distributable, it's just Debian that has issues with
OpenSSL (but then they shouldn't link it against curl either, so there
seems to be some _other_ problem there too).
And the problem is that curl linked against gnutls seems _broken_, so
Anand has asked if Debian can ship a binary git linked against a curl
that is linked against openssl (and the answer is probably "no, Debian
people think that is wrong").
Sure. And you can probably fix it by using NO_OPENSSL, which uses the
Mozilla SHA1 library. As I also pointed out.
In short - I just wanted to make sure that we do not make the insane
Debian policies somehow official git ones.
Linus