Darren J Moffat wrote: > James Falkner wrote: >> Darren, >> >> I'd be interested in helping out. I'd also like to ensure >> that the feature is usable cross-platform (for example, by >> using the KMF bindings through an OpenSolaris-specific >> interface, and allowing for other implementations on other >> platforms). I have such an abstraction implemented for generic >> use in IPS, which is currently under code review, and am hopeful >> that it will be completed in the near future. > > One of the reasons I want to use KMF is that KMF is an abstraction > layer, currently over OpenSSL and NSS (as used in Firefox et al). > > KMF doesn't exist on on OpenSolaris platforms but it should be easy to > port to them or implement the signing layer using some other platform > API (eg MSCAPI).
Exactly! As long as the proper abstraction exists, porting tiny bits of KMF or even binding directly to OpenSSL for non-OpenSolaris seems feasible. There are some examples for that (e.g. <http://pyopenssl.sourceforge.net>). So, I'd like to help out in designing that abstraction for IPS so that the majority of the new python code won't need porting at all. -jhf- _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
