>
>Hello, all. I recently finished working on a zlib-based compression
>filter BIO for OpenSSL, and would like to contribute this to the project.
>
>The code can be found at:
>
> http://www.castaglia.org/openssl/
>
>and includes a README, POD, and the files themselves.
Hi:
I�m the one of the refered message
http://www.mail-archive.com/[email protected]/msg09399.html
in your README file and I�m glad to see my hints there may have help you.
The method I built with that BIO works as you said, on top a file or memory
BIO.And I use it to compress the file BEFORE encription, of course, because
if not entropy of encrypted file is so high that compression does
nothing.But above message is so old that i can�t remember if I had to change
anything more in all this to have it working
>My next question is: what to do with this code from here?
I�m using this BIO to create big detached PKCS7 files with its data section
compressed.Looking at PKCS7_doit() I�ve put this "ZBIO" on top a file BIO
where original code used a memory BIO,so I can read and write the data
section of the envelope using it.I use the calculated hash when i have gone
all over the file to put it it the rigth place on PKCS7 struct,then I build
that PKCS7 header and then I put the compressed data at the end to create
the detached envelope.
I think it would be great if this BIO where included in OpenSSL so people
asking for compression could use it, but I think that PKCS7 standars says
nothing about compression.(And after some years I know OpenSSL people team
enougth to think that if there is no well defined standard they will not
include nothing.... ;-))
If OpenSSL 0.9.7 version supports indefinite length encoding this could be
even more interesting, because I did all this to manage big files without
having a big amount of data bytes to cipher loaded in memory.
Now I want to make you a question: �What happens if we put this BIO on top
of a socket BIO?.All the data throught the socket would be compressed,I
suppose.The same kind of BIO on the other side would decompress it.
It sound very interesting, so perhaps someone may have enought time to do
it...
Hope this will answer your last question.Hope not to have said anything
wrong.
Pablo J. Royo
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
