On 1/28/11 9:36 AM, Juan Lang wrote:
Hi Ken,
I'm planning to add an alternative implementation of schannel (SSL/TLS) support
for the Mac. The current implementation is based on GnuTLS. That library is
not typically found on Mac OS X. Although packagers can build it and ship it
and its dependencies with Wine for Mac OS X, I think it's better (especially
for security-related functionality) to use the system-provided library.
What's the issue with building GnuTLS? Is it that GnuTLS doesn't
support the Mac Keychain? Is it that it's an external dependency? If
the latter, we already pull in quite a bit that isn't found on the
Mac, so the incremental change isn't large.
The point is that MacOSX has built-in TLS support out of the box. Why
build GNU TLS when using MacOSX when it is not needed???
James McKenzie