[illumos-Developer] FLAG DAY: signed crypto removed

Garrett D'Amore garrett at nexenta.com
Sun Sep 12 10:40:08 PDT 2010


With my integration of "6 Need open kcfd", there is actually no more
kcfd or signed crypto tarballs.  (The necessary code for thread
management is in the kernel kcf.  You'll notice new kernel LWPs called
"kcfpoold" in ps -eLf output.)  Also, all vestiges of FIPS-140 support
are removed.

This represents a flag day for everyone building illumos.

You must do a full nightly across thsi flag day -- incrementals *will*
break.

You must not have a crypto tarball.   (One less thing to download from
Oracle.. yay!)

You *MUST* use the version of nightly in the latest source.  It is a
syntax error to try to use the old nightly -- it won't work unless you
have the old crypto tarball, and if you do, the result will not be
functional!

To recap:

* remove crypto tarball if present.
* use nightly from source tree
* do a full clobber build.

Thank you.

	- Garrett





More information about the Developer mailing list