Widelands bundles internal copy of md5

[Sigra]

Widelands bundles an internal copy of md5. This is bad style that violates the policy of distributions and prevents inclusion in official package repositories (see for example [http://blog.flameeyes.eu/2009/01/02/bundling-libraries-for-despair-and-insecurity]). The code is probably not forked.

[David Allwicher (aber)]

so, I guess openssl would be the library of choice?

[Jens Beyer (qcumber-some)]

I had a little check on this.

The code we have in widelands is some old example code by Ulrich Drepper, which has been adopted and modified/extended by many people.

I guess, as aber says, openssl would be the best choice. But it needs reimplementation.

The original code by Ulrich Drepper seems not to be generally available as library. It seems to be part of gnu coreutils binary "md5sum" but that's as far as I could find anything.

[SirVer (sirver)]

openssl might be an issue for windows compilation. Tino, can you confirm?

Also, that is a crypto library, would we not run into some exporting regulations here?

[SirVer (sirver)]

Setting to incomplete for bug sweeping.

[Launchpad Janitor (janitor)]

[Expired for widelands because there has been no activity for 60 days.]

[SirVer (sirver)]

This code has been modified quite often by us. If it is still third_party, we should simply move it into our third_party sub dir and be done with. Otherwise this is not worth any trouble anymore I think.