Hi Michal,<br><br><div class="gmail_quote">2009/9/1 Arjen de Korte<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Citeren Michal Hlavinka<div>
<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
We would like to use nss for cryptography instead of OpenSSL. Reason for this<br>
is mostly for FIPS 140 validation.<br>
<br>
See:<br>
<a href="http://fedoraproject.org/wiki/FedoraCryptoConsolidation" target="_blank">http://fedoraproject.org/wiki/FedoraCryptoConsolidation</a><br>
<a href="http://fedoraproject.org/wiki/CryptoConsolidationEval" target="_blank">http://fedoraproject.org/wiki/CryptoConsolidationEval</a><br>
<a href="http://fedoraproject.org/wiki/CryptoConsolidationScorecard" target="_blank">http://fedoraproject.org/wiki/CryptoConsolidationScorecard</a><br>
<br>
also OpenSuSE prefers to use the nss for cryptography for the same reason (<br>
<a href="http://en.opensuse.org/SharedCertStore" target="_blank">http://en.opensuse.org/SharedCertStore</a> )<br>
</blockquote>
<br></div>
The above makes lots of sense.<div><br></div></blockquote><div><br>very interesting indeed!<br>even more knowing that I was considering a gnutls port (mostly for licensing issues)...<br>thanks a lot for these pointers ;-)<br>
<br></div><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Would it be possible to use nss instead of openssl?<br>
</blockquote>
<br></div>
Most likely, yes.<div><br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
#ifdef blocks would be enough. I can prepare patches. What's your opinion?<br>
</blockquote>
<br></div>
I would certainly welcome an effort to standardize here, so please provide patches if you have any available. Preferably for the SVN trunk version, but if you only have them for older versions, I could probably port them to the latest version.<br>
</blockquote></div><br>seconded, your work here would be very much appreciated.<br><br>cheers,<br>Arnaud<br>-- <br>Linux / Unix Expert R&D - Eaton - <a href="http://www.eaton.com/mgeops" target="_blank">http://www.eaton.com/mgeops</a><br>
Network UPS Tools (NUT) Project Leader - <a href="http://www.networkupstools.org/" target="_blank">http://www.networkupstools.org/</a><br>Debian Developer - <a href="http://www.debian.org" target="_blank">http://www.debian.org</a><br>
Free Software Developer - <a href="http://arnaud.quette.free.fr/" target="_blank">http://arnaud.quette.free.fr/</a><br>
<br>