What | Removed | Added |
---|---|---|
Status | NEW | IN_PROGRESS |
CC | fbui@suse.com |
(In reply to Ludwig Nussel from comment #0) > Would it be possible to build systemd-resolved with openssl instead? That should be possible since https://github.com/systemd/systemd/pull/9734. However I'm not sure it would be a good idea since: - gnutls supports "TLS False Start" whereas openssl doesn't - gnutls backend is the default and used by all major distros That would leave TW the only distro using openssl here hence hitting tricky/security bugs that no other distro has faced before... So I'm wondering whether it is really worth avoiding to pull libgnutls in in a minimal system...