[systemd-devel] SSL for gatewayd

[Lennart Poettering]

On Wed, 16.01.13 21:07, Zbigniew Jędrzejewski-Szmek (zbyszek at in.waw.pl) wrote:

> > > search for "openvas gnutls" and "openvas libmicrohttpd"
> > > and you become an overview of the quality of both libraries
> > Er had Some relative Good Results with PolarSSL and lately the fork tropicSSL
> >
> > I was Not following the full discussion here, any reasons against
> > classic openSSL apart from size of the library
> Hi,
> well, we already use libmicrohttpd, and libmicrohttpd is already linked
> against gnutls (in Fedora and Debian at least). So if one is using
> libmicrohttpd, than it seems reasonable to stick to gnutls.

libmicrohttpd is the only embeddable HTTP server library which doesn't
suck completely. 

we already link against gcrypt via the FSS stuff, and indirectly via
libcryptsetup. gnutls is the natural next step of that i guess. 

> OTOH, libmicrohttpd is quite awful. I have been having a lot of
> trouble integrating libmicrohttp in my own epoll loop. I would
> be happy to replace it with something different.

Hmm, I thought that was possible, but I never looked in detail.

Lennart

-- 
Lennart Poettering - Red Hat, Inc.