From: David W. <dw...@in...> - 2014-12-10 15:11:48
|
On Wed, 2014-12-10 at 08:55 -0600, Douglas E Engert wrote: > > Easier? > Have you every dealt with the OpenSSL developers? Haha. Yes, and it's like pulling teeth. So OK, *maybe* the easier option is to trawl through *all* the software that's still using OpenSSL and convert it all to something saner like GnuTLS. But if we must attempt to deal with OpenSSL, it might turn out that merging ENGINE_PKCS11 *into* OpenSSL is marginally less painful than pushing changes *for* ENGINE_PKCS11 into OpenSSL without the engine code itself. -- dwmw2 |