Re: [9fans] TLSServer?

[William Ahern <william@25thandClement.com>]

On Mon, Nov 10, 2003 at 09:25:18AM -0500, Sam wrote:
> I need to write a Unix application that uses TLS/SSL.  I
> looked at using OpenSSL, but lordy mama -- what an interface.
> Since I only need to do the server side of the communication,
> I thought perhaps the Plan 9 tls stuff could be used.

It takes ~10 calls into OpenSSL in my TLS-able server to load trusted certs,
load the keys, install the descriptor and use it in my IO routines. Much,
much easier than I initially thought when I first dove into the horrible
documentation. And some of the crypto primitives are written in assembly,
which can make a big difference depending on your server's usage pattern.

All-in-all, OpenSSL was much simpler than it looks from 10,000 feet.