[sldev] Crypto Consolidation

Callum Lerwick seg at haxxed.com
Thu Aug 30 20:41:50 PDT 2007


So, the Fedora project has embarked on a "Crypto Consolidation Project".
The gist of it is, everything's getting patched to use NSS. Full details
here:

http://fedoraproject.org/wiki/FedoraCryptoConsolidation

The main reason for this is to consolidate things such as certificate
databases and whatnot. But it also has the side effect of helping to
render OpenSSL's GPL incompatibility moot.

The reason this may be of (marginal) interest to Second Life developers
is libcurl, used by the client, has been patched to be able to use NSS:

http://curl.haxx.se/mail/archive-2007-01/0116.html

Although apparently it already supported using GnuTLS and yaSSL anyway,
hmmm. :)

Last I checked the client didn't actually use OpenSSL directly, but
there's some common code that uses OpenSSL for blowfish. LL may want to
consider switching to NSS. Or not. Whatever.

This may make the GPL purists slightly happier. APR remains. Considering
NSS depends on NSPR, this may make NSPR more interesting as a
replacement for APR.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.secondlife.com/pipermail/sldev/attachments/20070830/2c8d39b0/attachment.pgp


More information about the SLDev mailing list