summaryrefslogtreecommitdiff
path: root/distrib/miniroot/install.sh
diff options
context:
space:
mode:
authorTheo de Raadt <deraadt@cvs.openbsd.org>1999-10-14 17:19:43 +0000
committerTheo de Raadt <deraadt@cvs.openbsd.org>1999-10-14 17:19:43 +0000
commitc75586258b9d92c65f04b5c5fecaf1e349914586 (patch)
treec950b71622c10c309d868e2c955e97d4b048c981 /distrib/miniroot/install.sh
parentd01cc887d257849c7006a17661bc8124cda14170 (diff)
flesh out ssl messages
Diffstat (limited to 'distrib/miniroot/install.sh')
-rw-r--r--distrib/miniroot/install.sh24
1 files changed, 18 insertions, 6 deletions
diff --git a/distrib/miniroot/install.sh b/distrib/miniroot/install.sh
index 1d7bfde9307..434e0bbb7fa 100644
--- a/distrib/miniroot/install.sh
+++ b/distrib/miniroot/install.sh
@@ -1,5 +1,5 @@
#!/bin/sh
-# $OpenBSD: install.sh,v 1.64 1999/10/14 17:17:46 millert Exp $
+# $OpenBSD: install.sh,v 1.65 1999/10/14 17:19:42 deraadt Exp $
# $NetBSD: install.sh,v 1.5.2.8 1996/08/27 18:15:05 gwr Exp $
#
# Copyright (c) 1997,1998 Todd Miller, Theo de Raadt
@@ -543,11 +543,23 @@ if [ X"$libssl" != X1 ]; then
resp=
while [ X"${resp}" = X ]; do
echo
- echo "The SSL libraries included with the CD do not contain RSA code"
- echo "for licensing reasons. Instead, enhanced SSL shared libraries"
- echo "with RSA code are available on ftp and http sites. If you do"
- echo "not install the SSL+RSA libraries right now, they are easily"
- echo "installed later."
+ echo "Two OpenBSD libraries (libssl and libcrypto, based on OpenSSL) implement many"
+ echo "cryptographic functions which are used by OpenBSD programs like ssh, httpd, and"
+ echo "isakmpd. Due to patent licensing reasons, those libraries may not be included"
+ echo "on the CD -- instead the base distribution contains libraries which have had"
+ echo "the troublesome code removed -- the programs listed above will not be fully"
+ echo "functional as a result. Libraries which _include_ the troublesome routines"
+ echo "are available and can be FTP installed, as long as you meet the follow (legal)"
+ echo "criteria:"
+ echo " (1) Outside the USA, no restrictions apply. Use libssl${VERSION}.tar.gz."
+ echo " (2) Inside the USA, non-commercial entities may install libsslUSA${VERSION}.tar.gz."
+ echo " (3) Commercial entities in the USA are left in the cold, due to how the"
+ echo " licences work. (This is how the USA crypto export policy feels to the"
+ echo " rest of the world.)"
+ echo ""
+ echo "If you do not install the libssl package now, it is easily installed at
+ echo "a later time (see the afterboot(8) and ssl(8) manual pages)."
+
echo -n "Install SSL+RSA libraries now via (f)tp, (h)ttp, or (n)ot? [$resp] "
getresp "$resp"
case "$resp" in