On 06/29/10 22:36, Rob Withers wrote:
> Hi David,
>
> I am CCing the squeak-dev list.
>
> I had tried to contact Ron over the weekend, since he is the admin for
> the SqueakSource Cryptography package. I needed to add you as a
> member of the Crypto team. That's right, you are a member now. I
> didn't hear from him so the email address may be bad. We'll see if
> we hear from him in the future. I hope so.
>
> Do you have the link to the Crypto mailing list?
Yes, do we move this discussion there?
>
> I agree we should do this in public. I would suggest the squeak-dev
> list.
>
> We may have several "forks" and/or subsequent work done from the root
> package.
>
> The root package for SSL is in the Monticello repository
> http://www.squeaksource.com/Cryptography, but it may not be the
> latest. I think that the SSL package there is the latest...Whoa! I
> just checked again and new SSL packages were inserted 2 days ago. The
> latest there used to be SSL-rww.4.mcz and now there is a SSL-jrd.12.mcz.
Yes, I copied the mods from the croquet-source repo. SSL was easy as
there were no forks. jrd.12 is the version I am using and it is working
pretty well. I did have some intermittent failures when I was first
moving to Squeak4.1 but those might have been due to errant versions of
the Cryptography package. I will do a fresh build and verify this version.
>
> The root package for Cryptography is in the same repository, but it is
> less clear which is the latest and greatest. There is a mixture of
> version numbers. I am using Cryptography-cmm.13.mcz. All tests pass
> except for a Rindael test and an X509 test (due to bad validity dates).
>
> I know there is packages in
> http://croquet-src-01.oit.duke.edu:8886/Contributions. SSL look like
> the ones now in the Cryptography repository above. The Cryptography
> packages in Contributions look like they are also in the Cryptography
> repository, but mixed up with other work. In Contributions, there is
> the sequence of packages:
>
> Cryptography-RJT.10.mcz (the root package)
> Cryptography-jrd.11.mcz
> Cryptography-jrd.12.mcz
> Cryptography-mtf.13.mcz
>
> These are interwoven with other packages in the Cryptography
> repository, with the same version numbers.
Right, there are several forks to be reconciled. FWIW I am running
mtf.13 as none of the versions from the original Cryptography repo had
ASN.1 support needed to do SSL (SSL30 or TLS10/11). Unfortunately this
version fails CryptoX509Test>>testSignatureValidation (as well as the
Rindael test you mentioned). I am hoping the harvesting from the other
forks will take care of this.
At this point all of the croquet-source versions are in their rightful
place in the Cryptography project on SqueakSource. The SqueakSource
project contains no license information. It would be a very good idea
to assign a license so that all contributions to this repo are
automatically assigned that license. I think Ron needs to guide this
process as this is his baby. At the very least Ron and all other
contributors need to be asked to accept whatever license is selected or
we will have to re-write those portions. I am happy to try to track
everyone down but not without making sure Ron is receptive to this.
David
