aboutsummaryrefslogtreecommitdiff
path: root/buildtools/debian-skeleton/rpki-ca.lintian-overrides
diff options
context:
space:
mode:
Diffstat (limited to 'buildtools/debian-skeleton/rpki-ca.lintian-overrides')
-rw-r--r--buildtools/debian-skeleton/rpki-ca.lintian-overrides15
1 files changed, 15 insertions, 0 deletions
diff --git a/buildtools/debian-skeleton/rpki-ca.lintian-overrides b/buildtools/debian-skeleton/rpki-ca.lintian-overrides
new file mode 100644
index 00000000..b8da1b8f
--- /dev/null
+++ b/buildtools/debian-skeleton/rpki-ca.lintian-overrides
@@ -0,0 +1,15 @@
+# The RPKI code requires a copy of the OpenSSL library with both the
+# CMS code and RFC 3779 code enabled. All recent versions of OpenSSL
+# include this code, but it's not enabled on all platforms. On Ubuntu
+# 12.04 LTS, the RFC 3779 code is disabled. So we take the least bad
+# of our several bad options, and carefully link against a private
+# copy of the OpenSSL crypto library built with the options we need,
+# with all the voodoo necessary to avoid conflicts with, eg, the
+# OpenSSL shared libraries that are already linked into Python.
+#
+# It would be totally awesome if the OpenSSL package maintainers were
+# to enable the RFC 3779 code for us, but I'm not holding my breath.
+#
+# In the meantime, we need to tell lintian to allow this nasty hack.
+
+rpki-ca: embedded-library