[Openhpi-devel] support other crypto/SSL libraries

[Dan H. <dh...@re...>]

Hi,

Fedora started a project called Crypto Consolidation [1], [2] some time
ago. The conclusion is that for licensing and certification reasons we
will standardize on the NSS library. That's why I would like to start
adding support for NSS library into OpenHPI as a alternative to the
currently used OpenSSL library.
If I have read the sources carefully, there are 2 areas in OpenHPI where
OpenSSL is used now - the first one is digest/hash computing in the
ipmidirect plugin and the second one is SSL support in the oa_soap and
ilo2_ribcl plugins. The first area can be done easily in parallel with
NSS primitives and for the second area it can be either reimplemented
for NSS or a compatibility library nss_compat_ossl could be used. I have
seen that some form of modular SSL/crypto support was just being added,
so I would like to coordinate my work with the one that is already in
progress.


	Dan

[1] http://fedoraproject.org/wiki/FedoraCryptoConsolidation
[2] http://fedoraproject.org/wiki/CryptoConsolidationEval

-- 
Dan Horák
Software Engineer, BaseOS

Red Hat Czech s.r.o., Purkyňova 99, 612 45 Brno