Instead of a git submodule allow botan-src to checkout a tag
randombit opened this issue · comments
Discussion in #94
For released versions, we should download the tarball, and check it against an embedded SHA-256
openssl-sys seems to support a lot of features wrt version autodetection, etc here so may be a good one to study.