#879459 git: please build against openssl with OPENSSL_SHA1=1

Package:
git
Source:
git
Description:
fast, scalable, distributed revision control system
Submitter:
Shawn Landden
Date:
2017-10-26 04:03:21 UTC
Severity:
wishlist
#879459#5
Date:
2017-10-21 19:42:23 UTC
From:
To:
Openssl's sha1 is much faster, ~25% even on this crusty 7 year old laptop. On new Intel and
all arm64 machines which have hardware acceleration openssl will be even more dramatically
faster.

shawn@t410s:~/git/git$ time git fsck
Checking object directories: 100% (256/256), done.
warning in tag d6602ec5194c87b0fc87103ca4d67251c76f233a: missingTaggerEntry: invalid format - expected 'tagger' line
Checking objects: 100% (235759/235759), done.
Checking connectivity: 234357, done.

real	0m24.915s
user	0m24.314s
sys	0m0.536s
shawn@t410s:~/git/git$ time ./git-fsck
Checking object directories: 100% (256/256), done.
warning in tag d6602ec5194c87b0fc87103ca4d67251c76f233a: missingTaggerEntry: invalid format - expected 'tagger' line
Checking objects: 100% (235759/235759), done.
Checking connectivity: 234357, done.

real	0m21.264s
user	0m20.695s
sys	0m0.548s
#879459#10
Date:
2017-10-21 20:33:58 UTC
From:
To:
Git’s builtin SHA-1 implementation has the advantage of trying to detect attempted collisions (https://github.com/cr-marcstevens/sha1collisiondetection), which seems like good thing to do by default these days.

Furthermore, Debian does not ship GPL code linked with OpenSSL for license reasons (https://lintian.debian.org/tags/possible-gpl-code-linked-with-openssl.html).

Anders
#879459#15
Date:
2017-10-21 21:12:00 UTC
From:
To:
tag 879459 wontfix
confused and didn't notive this)
#879459#20
Date:
2017-10-26 03:39:54 UTC
From:
To:
tag 879459 wontfix
thanks
#879459#25
Date:
2017-10-26 03:58:53 UTC
From:
To:
tag 879459 = wontfix
thanks