From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.org/gmane.linux.lib.musl.general/3373 Path: news.gmane.org!not-for-mail From: Gregor Pintar Newsgroups: gmane.linux.lib.musl.general Subject: Re: High-priority library replacements? Date: Tue, 28 May 2013 19:30:55 +0200 Message-ID: References: <20130425041553.GA13951@brightrain.aerifal.cx> Reply-To: musl@lists.openwall.com NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Trace: ger.gmane.org 1369762267 27397 80.91.229.3 (28 May 2013 17:31:07 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Tue, 28 May 2013 17:31:07 +0000 (UTC) To: musl@lists.openwall.com Original-X-From: musl-return-3377-gllmg-musl=m.gmane.org@lists.openwall.com Tue May 28 19:31:08 2013 Return-path: Envelope-to: gllmg-musl@plane.gmane.org Original-Received: from mother.openwall.net ([195.42.179.200]) by plane.gmane.org with smtp (Exim 4.69) (envelope-from ) id 1UhNjn-0006ZN-Qd for gllmg-musl@plane.gmane.org; Tue, 28 May 2013 19:31:07 +0200 Original-Received: (qmail 15728 invoked by uid 550); 28 May 2013 17:31:06 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: Original-Received: (qmail 15720 invoked from network); 28 May 2013 17:31:06 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; bh=GN8Ro9rJ5xtHr0E+sA0ur/v5QpDn4suTLN7amiJ9nBE=; b=cdDGKQwUguRn584aSEJ36Lrr9dhmiihs67j1VnLLI4EYlJOJPwwa2gxfKBXX0ubiQE WVUkJIVQt0GthJLgK/aoHGogCLB/odnmZ6zTJ74JW+5u9pDBqmsNnC/WTbtmxaAcn2QC H11KreqSooAfpMmwb9GrhPdyHbI/xopaCD0t/0HoPT2T4QjT/X9LdYup/M6lP+8Ol00R ST6qWv5PEuAboMDamItg7dk/ckx8n1Xwhf6wK3NNvjBhEmiFI/S7QOjEZPWr/Av0tyPy 2S44iCQSWeZ1ci6ktO8qNik6tloJz7ClPMaqO1hwky+cM3iJuOV3s0UO+KMa6k4OZXk/ Tguw== X-Received: by 10.180.37.109 with SMTP id x13mr13186527wij.20.1369762255579; Tue, 28 May 2013 10:30:55 -0700 (PDT) In-Reply-To: Xref: news.gmane.org gmane.linux.lib.musl.general:3373 Archived-At: 2013/5/28, Daniel Cegie=C5=82ka : > 2013/5/27 Gregor Pintar : > >> Unless someone really takes a deep look (vulnerabilities, TLS 1.2) >> into tropicssl, > > I think that in a few weeks, I will have free time to do so. That's > why I care about the opinion, if you are interested to use tropicssl's > BSD code as ssl layer for kripto. > > Daniel > Yes, I think it would be good, but API could maybe be little cleaner/simpler. I would suggest to use prefix (library name) on all external symbols. PolarSSL and TropicSSL expose too much in header. I'm think tropicssl compatibility doesn't mean anything as it is not very popular, but we could add PolarSSL and OpenSSL compatibility header. I would also look at axTLS's API (http://axtls.sourceforge.net/dox/group__c__api.html). API is very important, all other things can be fixed. Currently I'm quite busy, but maybe I could help as I have problems with kripto's API. I might get some ideas for it. Gregor