virtualsquare / virtualsquare/vde-2
wolfSSL’s licence is now incompatible with VDE’s
@danielinux is already working on this.
Since Mar 30, 2026.
- Dominant language
- C
- Stars
- 255
- Forks
- 45
- PR merge metrics
- No merged PRs in 30d
Description
They switched from GPL-2.0-or-later to GPL-3.0-or-later in a patch release that contained CVE fixes: https://github.com/wolfSSL/wolfssl/commit/629c5b4cf61ac717d40678b5cd65974b42077af6.
Some files in VDE have licensing headers allowing GPLv3 and later versions, but many only specify GPLv2. Therefore linking VDE to non‐vulnerable versions of wolfSSL is unfortunately a copyright violation, and Mbed TLS support is not present in the released version, which puts distributions in an awkward position.
I would recommend dropping the wolfSSL support in favour of Mbed TLS. If you could also cut a stable release with that change, that would definitely help distributions out :) In Nixpkgs we will probably backport the Mbed TLS support for now.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.