On 04/11/2009, at 10:18 PM, Dmitry Chestnykh wrote:

> Hello,
>
> I'm currently implementing HTTPS support for Fossil (using OpenSSL).
> It's client-side only, as Apache handles server side for me.
>
> There's a preliminary draft version here: http://codingrobots.org/p/fossil/
>
> (Changes: 
> http://codingrobots.org/p/fossil/vinfo/e81ab9a4b91582a696ae7d7f1f39bf0cc53d6ce0
> )
>
> There's no certificate validation yet (which is important and must be
> implemented). I'm writing here to ask your feedback on implementation,
> and thoughts on how to do validation (this is the first time I'm
> writing something with SSL).
>
> Anyone wants to help me?

Both DRH and I looked at the OpenSSL client-side code and decided it  
was going to be too much of a hassle to integrate.

As an alternative, I started looking at extracting the client--side  
SSH code from Cryptlib (http://www.cs.auckland.ac.nz/~pgut001/ 
cryptlib/), a package I've done a lot with over the years.

This might be a fruitful avenue for you to explore.

Steve
_______________________________________________
fossil-users mailing list
[email protected]
http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

Reply via email to