RE: OpenSSL

Is there at least one SSL implementation under GPL(2) which proved to be at
least same stable as OpenSSL?

Maybe it's worth it to extend "upgrade" scheme to: "deploy source package
here, if successful - copy binaries to other machines"?

-----Original Message-----
From: Victor Kirhenshtein [mailto:victor_at_opticom.lv]
Sent: 6 ���� 2005 �. 9:57
To: NetXMS Developers talks
Subject: [netxms-dev] OpenSSL

Hi all!

Now we have to choose - use OpenSSL library or not. Below I try to
summarize pros and cons of using OpenSSL:

Positive:

1. Well-tested encryption algorithm implementations
2. Ready to use encryption layer
3. Possibility to use certificates for authentication

Negative:

1. OpenSSL is a huge library, and we need only a few percents of it's
functionality
2. If we need encryption between server and agents, each agent will be
required to have OpenSSL library installed (and OpenSSL development
package for source distribution).
3. I heard about problems with passing large chunks of data through
OpenSSL, and NetXMS sometimes uses very large messages.

Any comments?

Regards,
Victor
Received on Mon Jun 06 2005 - 10:13:05 EEST