Bill Dortch wrote:
Hmm, that may work with HTTPS, but certainly won't help with Net::SSH, which depends on OpenSSL::PKey, as well as OpenSSL::BN (which I recently implemented) and OpenSSL::PKey::DH (which I'm just about done with). Of course HTTPS support is more critical, but I hate to see us stripping away functionality (especially when I'm trying to use it!).

Maybe we could break out a separate 'stripped' version for HTTPS-only support.

Also, the recent 1.1 API changes break some pieces of jopenssl (though perhaps nothing that's being used). It may be time to think about splitting it into 1.0x and 1.1x versions.
We're trying to avoid splitting stuff up.

Oh, and btw, if you have implementations of this stuff, could you please make sure that it gets committed? We're making changes to jopenssl all the time right now and it would be a shame to have to redo lots of work.

The approach I'm looking at right now will still use the JCE, but with explicit provider all over the place, so we get away from the original problem.

Cheers

--
Ola Bini (http://ola-bini.blogspot.com) JRuby Core Developer
Developer, ThoughtWorks Studios (http://studios.thoughtworks.com)
Practical JRuby on Rails (http://apress.com/book/view/9781590598818)

"Yields falsehood when quined" yields falsehood when quined.



---------------------------------------------------------------------
To unsubscribe from this list please visit:

   http://xircles.codehaus.org/manage_email

Reply via email to