Hello,
We would like to start a Kernel SSL Enhancements project.
We are requesting endorsement from the security community
and the networking community.
Thanks,
-Krishna
-- OPENSOLARIS PROJECT PROPOSAL --
Project Name:
Kernel SSL Enhancements
Short Name:
kssl
Project Synopsis:
Kernel SSL Enhancements to make it more widely usable.
Project Purpose:
OpenSolaris has a kernel level SSL server proxy (KSSL) that
can be used for improved SSL performance on the server side.
It can be configured as a proxy for a non-SSL server
(e.g. web servers like Apache and Sun web server) to communicate
with a SSL client.
There is an ongoing effort to add new features to KSSL.
This project proposes to provide a place for that ongoing effort.
Possible initial enhancements include:
* Debugging tools and scripts
* Add IPv6 support
* Add support for TLS 1.1
* Performance optimizations
* Add support for client authentication
* Add support for ECC cipher suites
A new mailing list kssl-discuss at opensolaris.org is requested.
Proposed Community Sponsors:
Security and Networking
Participants:
Project leads:
Krishna Yenduri (O.S. id: krishna), primary contact
Kais Belgaied (O.S. id: kais)
Vladimir Kotal (O.S. id: vkotal)
Other Participants:
Darren Moffat (O.S. id: darrenm)
Pallab Bhattacharya (O.S. id: pallab)
Other interested participants: please speak up, or join the project
list once we have it running. Contributions of both code and review
time are obviously quite welcome; there's a lot of work to be done
here.
