Hi,

It's been a long time since I last posted on the FreeRDP mailing list :)
Things have changed a lot: if I used to be taking development contracts for
FreeRDP, now I am looking for a developer to take a development contract. I
know what is involved, but I don't have enough time to work on it myself.

The project is "simple": add optional compile-time support for mbedTLS as a
replacement of OpenSSL. I have already ported WinPR to mbedTLS in the past,
but FreeRDP still has a direct dependency on OpenSSL. One of the biggest
chunk of work would be to decouple the OpenSSL BIO layering in the core,
something that is heavily used in the TS Gateway implementation. One
possibility would be to define our own BIO interface that would be close to
the one used in OpenSSL, but different, such that it could be adapted to
both OpenSSL and mbedTLS.

Devolutions would sponsor this project. We want mbedTLS support because we
are using it in all of our other projects, and FreeRDP is the only reason
why we still need OpenSSL. There are many reasons why mbedTLS is
interesting (Apache 2.0 licensing, smaller and more modular than OpenSSL,
easier to build for all platforms, etc) but we understand that OpenSSL
should always remain an option because it is very widespread. I am not here
to debate which one is better, we just wish to make it possible to use
mbedTLS as an alternative to OpenSSL in FreeRDP.

If you are interested or if you know someone who would like to take this
contract, please contact me in private. I can provide some reference code
from other projects to help understanding how to use the mbedTLS APIs.

Best regards,
-Marc-André Moreau

_______________________________________________
FreeRDP-devel mailing list
FreeRDP-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/freerdp-devel

Reply via email to