Re: [Demexp-dev] SSL library: which one to use

[felix . henry]

David,

I am far from being an expert on SSL, but I had a look at
the sites you mentionned.

Matrixssl seems to be dedicated to small devices and strongly
optimized for reduced memory implementation. It may not offer
the same functionalities and flexibility as the other ones.

Between OpenSSL and GnuTLS I can't tell. GnuTLS release is 1.0 while
OpenSSL is 0.9.6 , does that mean anything in terms of matureness?

Cheers,

   Felix

[Out of Scope] For your info I'm currently working (=learning) SPIP
so that we can have a beautiful, flexible, multilingual web site
soon.



> Hello,
> 
> In a near future, we will have to integrate an SSL (Secure Socket Layer)
> library between the client and the server. I do not intend to write such
> a library: it would be stupid, I'm not a security neither crypto
> expert. So we need to integrate external code. Thus the question: which
> code? 
> 
> Right now, I know about:
> 
>  OpenSSL  http://www.openssl.org/
> 
>  MatrixSSL http://matrixssl.org/ 
> 
>  GnuTLS http://www.gnu.org/software/gnutls/
> 
> 
> Personnally, I'm in favor of OpenSSL. Well known, well scrutinized, well
> maintained. There is a small licensing issue with the GPL but we can add
> a specific clause to solve the issue.
> 
> I know that Fred would prefer us to use another library for licensing
> issues. I don't have much technical argument pro or con OpenSSL except
> that everybody uses it.
> 
> Has anybody other pointer? What do you think of it?
> 
> Yours,
> d. 
> -- 
>  David Mentré <address@hidden>
> 
> 
> _______________________________________________
> Demexp-dev mailing list
> address@hidden
> http://mail.nongnu.org/mailman/listinfo/demexp-dev
>