Hi Dan,

Could you please elaborate on licensing and certification reasons for
standardizing on NSS. One of the reasons we picked OpenSSL is that it is
bundled in all of the distributions OpenHPI is currently supported on.
One thing to consider when choosing NSS over OpenSSL for OpenHPI is
NSS's availability on different distributions.

Thanks,
-- Shuah
 
On Wed, 2008-04-23 at 12:50 +0000, Dan Horák wrote:
> Hi,
> 
> Fedora started a project called Crypto Consolidation [1], [2] some time
> ago. The conclusion is that for licensing and certification reasons we
> will standardize on the NSS library. That's why I would like to start
> adding support for NSS library into OpenHPI as a alternative to the
> currently used OpenSSL library.
> If I have read the sources carefully, there are 2 areas in OpenHPI where
> OpenSSL is used now - the first one is digest/hash computing in the
> ipmidirect plugin and the second one is SSL support in the oa_soap and
> ilo2_ribcl plugins. The first area can be done easily in parallel with
> NSS primitives and for the second area it can be either reimplemented
> for NSS or a compatibility library nss_compat_ossl could be used. I have
> seen that some form of modular SSL/crypto support was just being added,
> so I would like to coordinate my work with the one that is already in
> progress.
> 
> 
>         Dan
> 
> [1] http://fedoraproject.org/wiki/FedoraCryptoConsolidation
> [2] http://fedoraproject.org/wiki/CryptoConsolidationEval
> 
> --
> Dan Horák
> Software Engineer, BaseOS
> 
> Red Hat Czech s.r.o., Purkyňova 99, 612 45 Brno
> 
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
> Don't miss this year's exciting event. There's still time to save $100.
> Use priority code J8TL2D2.
> http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
> _______________________________________________
> Openhpi-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openhpi-devel
-- 



-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference 
Don't miss this year's exciting event. There's still time to save $100. 
Use priority code J8TL2D2. 
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Openhpi-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openhpi-devel

Reply via email to