--On Thursday, February 21, 2008 12:06 AM -0800 Howard Chu <[EMAIL PROTECTED]>
wrote:
I expect that a port to Mozilla's NSS wouldn't be
too much more difficult, although of course Howard would be the person to
ask for an estimate.
I would think there are other developers here who are familiar with
Mozilla NSS and can read the code in libldap/tls.c. It's certainly not
high on my list at the moment since OpenSSL works for me. One thing that
I find rather annoying about NSS is its use of a private
certificate/keystore that requires additional tools to manipulate.
When Stanford was looking at an OpenSSL alternative, Mozilla's NSS was
brought up then. There was a discussion on IRC's #ldap channel about it at
that time, IIRC, and it was found deficient in a number of areas. Not that
I recall what they all were. ;)
--Quanah
--
Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration
