Welcome, Guest. Please login or register.

Author Topic: AmiSSL / OpenSSL updates to support TLSv1.1/1.2?  (Read 7033 times)

Description:

0 Members and 1 Guest are viewing this topic.

Offline buzz

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 612
    • Show all replies
Re: AmiSSL / OpenSSL updates to support TLSv1.1/1.2?
« on: October 20, 2014, 02:51:25 PM »
Probably would be beneficial to look at something other than openssl as a base for a library on the amiga such as polarssl (https://polarssl.org/). Much smaller - I use polarssl on the original xbox for xbmc4xbox for libcurl and librtmp.

https://polarssl.org/openssl-alternative
 

Offline buzz

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 612
    • Show all replies
Re: AmiSSL / OpenSSL updates to support TLSv1.1/1.2?
« Reply #1 on: October 22, 2014, 05:11:02 PM »
Quote from: Hans_;775425
You should also consider how rigorously the code is checked for bugs, and how quickly problems are patched. Given that we're talking about a protocol for secure communications, we don't want to end up with something that has known exploits that aren't fixed quickly enough.

do some reading up on polarssl then? it is certainly in active development. It is supported by some well known software - openvpn, curl, etc.

[edit] sorry I think I misread - you are referring to the libressl fork ?
« Last Edit: October 22, 2014, 05:34:56 PM by buzz »
 

Offline buzz

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 612
    • Show all replies
Re: AmiSSL / OpenSSL updates to support TLSv1.1/1.2?
« Reply #2 on: October 22, 2014, 05:14:52 PM »
Quote from: olsen;775431
Contemporary Amiga software which uses the SSL/TLS functionality requires API compatibility with amissl.library, which makes a port of PolarSSL a difficult option at best.

the software could be adapted I guess, if still in development. Anyway, I was just throwing ideas out there. adapting software to use the polarssl api is not too tricky, if the source is available - unfortunately not the case very often in amiga land (Check projects like curl, librtmp, openvpn which support both). There is at least one other ssl solution out there that has an openssl compatible api - cyassl I think

polarssl is still far more suited to the amiga than openssl, and a lot easier to build/adapt.
« Last Edit: October 22, 2014, 07:22:12 PM by buzz »
 

Offline buzz

  • Hero Member
  • *****
  • Join Date: Mar 2002
  • Posts: 612
    • Show all replies
Re: AmiSSL / OpenSSL updates to support TLSv1.1/1.2?
« Reply #3 on: October 22, 2014, 07:25:16 PM »
Looks like polarssl does have an openssl wrapper - not sure if it is up to date/working/maintained - but if it works it would make keeping the api compatible easier.