Julio S�nchez wrote:
[...]
Unsure about this, I am not sure I understood the implications. What is
the real-world equivalent of an instance of OpenCA::Crypto::OpenSSL? A
crypto provider? A crypto object (certificate, request, etc.)? Something
else?
A crypto provider...
[..]
No, only OpenCA::Crypto::OpenSSL does it and all OpenCA::Crypto::*
[...]
it and my example might be inducing Michael to think so.
Ok, I was misunderstanding. So the Crypto::* are internals to the
general crypto interface, nothing to do with actual modules, right ?
Anyway, the core of OpenCA and the supporting classes see nothing of this.
[...]
I think this is a misunderstanding, these classes are implementation
artifacts of a particular crypto provider module, there was no
suggestion of replacing OpenCA::X509 and the like, they remain
essentially as they are now. These are new classes (that does not imply
new OpenCA packages, they may be part of the OpenSSL package, where they
logically belong).
Why are them internals to the Crypto:: and not to the specific OpenSSL:: ?
The crypto then exports a single interface or an interface for each of
its internals ?
I have not shown it in the example, but if we have each internal openssl
allocated thing mapped to one Perl object, now we can write destructors
for them, I can create a new method DESTROY that will call X509_free()
or whatever is needed. So we can create internal certificates when
needed or store references to them in a OpenCA::X509 object and when no
longer needed they will be freed correctly, for example, when that
OpenCA::X509 object is destroyed.
Right.
There are other ways, of course, but they require more houskeeping and
tend to leak memory. It may not be important in a CGI world, but they
become critical in a mod_perl world.
[...]
I agree, that's why I did not want anything committed until we had an
idea of where are we heading.
Can you start writing a sort of documentation (lyx, openoffice, ... as
you wish) about this structure ?
--
C'you,
Massimiliano Pala
--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager] [EMAIL PROTECTED]
[EMAIL PROTECTED]
http://www.openca.org Tel.: +39 (0)59 270 094
http://openca.sourceforge.net Mobile: +39 (0)347 7222 365
-------------------------------------------------------
This sf.net email is sponsored by: See the NEW Palm
Tungsten T handheld. Power & Color in a compact size!
http://ads.sourceforge.net/cgi-bin/redirect.pl?palm0001en
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel
