[Opendnssec-maintainers] supported sqlite3 version

[Paul Wouters]

On 04/12/2013 07:08 AM, John Dickinson wrote:

>> I would recommend waiting for RHEL and ubuntu LTS to be upgraded before demanding this switch. RHEL-7 will have sqlite 3.7.x.
>
> You would be happy even though RHEL-6 extended support goes until 2023?

But you can tell people to use RHEL7 instead. Supported does not mean "dont use anything newer/better" :)

> Another option is for us to have configure detect the sqlite version and only compile new features if it detects 3.7.x.
>
>> Related, opendnssec won't be able to get into RHEL-6 properly (as opposed to being in EPEL-6) as long as it uses a non-approved/non-certified crypto library (botan). The only allowed crypto libraries are nss, openssl and libgcrypt.
>
> Out of interest, what are the requirements needed to become approved and certified?

A ship of money, and lots of time. And on a continued basis because every time there is a change in the crypto software, it has to get re-certified. And we are 
talking a lot more then just a few thousand dollars. So it is extremely unlikely to change in the next couple of years.

Paul