Index | Thread | Search

From:
Stuart Henderson <stu@spacehopper.org>
Subject:
Re: [PATCH] security/libsrtp: enable crypto/ssl
To:
Klemens Nanni <kn@openbsd.org>
Cc:
"Sergey A. Osokin" <osa@freebsd.org>, ports@openbsd.org
Date:
Tue, 27 May 2025 10:07:50 +0100

Download raw body.

Thread
On 2025/05/26 01:46, Klemens Nanni wrote:
> 25.05.2025 20:35, Sergey A. Osokin пишет:
> > here's the patch enabling SSL for security/libsrtp, that's required
> > for net/tdesktop.

I think that's rather "use libressl for crypto rarher than the internal
implementations".

> Did you test this?
> What changes for you in tdesktop?
> 
> I'm aware of the problem (group voice/video chats don't work)
> and already tried libsrtp with TLS enabled, but it didn't help.
> 
> NB:  as per 'make port-lib-depends-check' only "crypto" should
>      be in WANTLIB.
> 
>      Plus, we need to test other net/libsrtp consumers as well.
> 

Yes, other consumers definitely need checking.

A library major bump is required too.

Dynamic export changes:
added:
	srtp_aes_gcm_128
	srtp_aes_gcm_256
	srtp_aes_icm_192
	srtp_mod_aes_gcm

removed:
	SHA_K0
	SHA_K1
	SHA_K2
	SHA_K3
	srtp_aes_decrypt
	srtp_aes_encrypt
	srtp_aes_expand_decryption_key
	srtp_aes_expand_encryption_key
	srtp_mod_sha1
	srtp_sha1_core
	srtp_sha1_final
	srtp_sha1_init
	srtp_sha1_update