From: Török E. <edw...@et...> - 2013-09-23 15:10:18
|
On 09/23/2013 01:56 PM, Gerd Stolpmann wrote: > Hi, > > thanks for the patch. If I don't find another solution, I'll apply it. > > Currently, I'm revising SSL anyway - OCamlnet 4.0 will have its own > binding for GnuTLS, and this will give us a lot more freedom in the > design. In particular, the management of the TCP connection and the TLS > tunnel can be completely decoupled (i.e. TLS will appear as a separate > layer on top of the multiplex controller). > > (If you are curious: > https://godirepo.camlcity.org/wwwsvn/branches/onet4/code/src/nettls-gnutls/?root=lib-ocamlnet2) Interesting, does this mean that an application could choose between OpenSSL and GnuTLS by simply linking with nettls.gnutls vs nettls.openssl? [*] [*] Or why not someone could contribute a nettls.nss, as Fedora seems to prefer it over GnuTLS (Debian on the other hand seems to default to GnuTLS in curl for example): https://fedoraproject.org/wiki/FedoraCryptoConsolidation Best regards, --Edwin |