[zeromq-dev] Defaulting to tweetnacl?

[frank]

Hi,

:)

I could try/start at least, could you point me to a good place in the wiki?
This place http://zeromq.org/build:_start looks promising?

Problematic for me is the section from the windows build description:

|cd libzmq\builds\msvc :: first time through, run configure.bat to copy
property pages at correct locations :: it also configures according to
presence of libsodium or not (use default tweetnacl) |  
Which totally sounds like the thing Jim Garlick mentions below ("silently use this or that")
So it is quite hard to document the behaviour if the approaches in the various build systems is not uniform.

I was referring to the "explictly enable feature" approach implemented in the cmake build 
system at the time I last looked.... :(

kind regards
  Frank




On 03/02/2016 09:37 AM, Pieter Hintjens wrote:
> Sounds good. Would you like to add a section on secure builds on the
> wiki? We can point people to this from the download page.
>
> On Wed, Mar 2, 2016 at 9:03 AM, frank <soundart at gmx.net> wrote:
>>
>> On 03/01/2016 09:34 PM, Jim Garlick wrote:
>>
>> ...
>>> It at least seems wrong to have libzmq silently use builtin tweetnacl
>>> if libsodium is not found, as that might lead to people not getting
>>> the robust build they intended. Jim
>> Hi,
>>
>> For me this is the most important part. In the doc should be
>>
>> - an overview of the crypto options available
>> - a mentioning of the tweetnacl default being used
>>   - btw I think no auto detection and no auto-usage of libsodium was
>> discussed. libsodium has to be activated by an explict switch like
>> "--with-libsodium="
>> - and a recommendation for binary distributions to use libsodium,
>> because of the easier security updates for them
>>
>> In order to avoid surprises and get a "robust build"
>>
>> kind regards
>>   Frank
>>
>>
>>
>> _______________________________________________
>> zeromq-dev mailing list
>> zeromq-dev at lists.zeromq.org
>> http://lists.zeromq.org/mailman/listinfo/zeromq-dev
> _______________________________________________
> zeromq-dev mailing list
> zeromq-dev at lists.zeromq.org
> http://lists.zeromq.org/mailman/listinfo/zeromq-dev