Re: [Openvpn-devel] gentoo build inconsistency with openssl in openvpn using elliptic curve cert

[debbie10t <deb...@gm...>]

On 03/04/17 21:15, Gert Doering wrote:
> Hi,
>
> On Mon, Apr 03, 2017 at 08:51:23PM +0100, debbie10t wrote:
>> Turns out to be:
>> freenode#gentoo <stqn> you need to disable the bindist use flag
>> (preferably globally) to get EC support
>
> "why"?

Something to do with Licences:
#gentoo
<me> out of curiosity .. i presume gentoo intend to include elliptic 
curve algos in openssl at some time ?
<iamben> they are included if you disable the bindist flag
<iamben> USE=bindist disables them, so that you can legally redistribute 
your package as built

<iamben> those algorithms are (possibly) patent-encumbered



> (But thanks for figuring out and documenting)

No prob :)