On Thu, Dec 11, 2014 at 07:18:16PM +0100, Jan Alexander Steffens wrote:

On Wed, Dec 10, 2014 at 10:46 PM, Gaetan Bisson <bisson@archlinux.org> wrote:

...

I'd like to move gnutls and its dependencies (libtasn1, nettle, p11-kit) to [core] so gnupg can link against it; that'll enable HKPS support.

p11-kit and its dependency libtasn1 have already been moved as they are dependencies of ca-certificates-utils.

...

Furthermore, nss and its dependencies nspr and sqlite have been moved as ca-certificates-mozilla is a dependency of ca-certificates. (This also opens up the possibility of building curl against nss).

SSL/TLS implementations are not 100% exchangeable in libcurl. Building against NSS could cause *interesting* side effects: http://curl.haxx.se/libcurl/c/CURLOPT_SSL_CIPHER_LIST.html