On Wed, 2006-05-24 at 11:51 -0700, Steve G wrote:
>> - multiple digests operation (openssl, gnutls, nss .. some
programs are
>> now linked with *all* avalaible implemntations 8-0 ),
>
>Yeah, I agree. OpenSSL seems to be the most comprehensive, but
>its licence stinks and this is why gnutls was written in the first
>place. Now that Mozilla adopted the triple MPL/GPL/LGPL license,
>there's no reason to keep gnutls any more.
We need to try to streamline the number of SSL implementations for another
reason, FIPS 140-2 certifications. I think that FIPS 200 will be applicable next
year which pulls in the requirement of all crypto being certified.
-Steve
Which SSL implementation do you plan to standardize on? Has any
potential licensing conflicts with OpenSSL and GPL programs been
discussed?
Rahul