From: Jeff King <peff@peff.net>
Date: Thu, 07 Feb 2008 20:40:29 GMT
Subject: Re: git-fetch in 1.5.4 fails versus 1.5.3.8
Message-ID: <20080207204026.GA2550@sigill.intra.peff.net>
In-Reply-To: <alpine.LFD.1.00.0802071039010.2883@woody.linux-foundation.org>

On Thu, Feb 07, 2008 at 10:42:15AM -0800, Linus Torvalds wrote:

> For crazy people who think that regular libraries can change the copyright 
> status of a program (not so), you can always decide to build without 
> OpenSSL and use the included Mozilla-based SHA1 implementation for git.

FWIW, this is not about OpenSSL for SHA1; it is about the underlying
library used by curl to do SSL (gnutls vs openssl). And the problem is
that curl linked against gnutls seems _broken_, so Anand has asked if
Debian can ship a binary git linked against a curl that is linked
against openssl (and the answer is probably "no, Debian people think
that is wrong").

-Peff