[PROPOSAL] Evict zlib

Alexander Bokovoy ab at samba.org
Fri May 3 07:51:52 UTC 2019

On pe, 03 touko 2019, Andrew Bartlett via samba-technical wrote:
> It was recently pointed out that unused cryptography can be a pain for
> users of our tarball.  I also recently did some work[1] where we
> documented the location of cryptography in Samba.
> With GnuTLS being a requirement now, I think zlib is also a reasonable
> requirement and removing it would also remove some bad and un-used
> crypto from the tree.
> What do folks think?

There are four places where zlib is in use in Samba:
 - NDR compression/decompression code in librpc
 - DRSU replication code in libcli uses CRC32
 - CRC32 use in gencache
 - ntlmssp signing code uses CRC32 code

I think this part of zlib is stable enough and available widely.

/ Alexander Bokovoy

More information about the samba-technical mailing list