On 04/11/2009, at 10:18 PM, Dmitry Chestnykh wrote: > Hello, > > I'm currently implementing HTTPS support for Fossil (using OpenSSL). > It's client-side only, as Apache handles server side for me. > > There's a preliminary draft version here: http://codingrobots.org/p/fossil/ > > (Changes: > http://codingrobots.org/p/fossil/vinfo/e81ab9a4b91582a696ae7d7f1f39bf0cc53d6ce0 > ) > > There's no certificate validation yet (which is important and must be > implemented). I'm writing here to ask your feedback on implementation, > and thoughts on how to do validation (this is the first time I'm > writing something with SSL). > > Anyone wants to help me?
Both DRH and I looked at the OpenSSL client-side code and decided it was going to be too much of a hassle to integrate. As an alternative, I started looking at extracting the client--side SSH code from Cryptlib (http://www.cs.auckland.ac.nz/~pgut001/ cryptlib/), a package I've done a lot with over the years. This might be a fruitful avenue for you to explore. Steve _______________________________________________ fossil-users mailing list [email protected] http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users

