#3 Support OpenSSL engines

open
Dan Razzell
None
5
2006-07-13
2005-11-10
Victor Wagner
No

Newer versions of OpenSSL have engine mechanism which
allows to use alternate (i.e. hardware) implementation
of cryptoalgorithms. Most SSL applications such as
apache/mod_ssl or stunnel already have support for
engines (via config file). It is desirable to allow
tcltls applications be engine-aware too.

Simplest way for to support engines is to read default
openssl configuration file via OPENSSL_config function,
but more flexible is to specify engine id and options
via special tcl command.

Discussion

  • Pat Thoyts
    Pat Thoyts
    2006-07-13

    • assigned_to: nobody --> razzell