Re: [PATCH] Persistent connections and HTTPS

--===============5315980417192870443==
Content-Type: multipart/signed; micalg="pgp-sha1";
	protocol="application/pgp-signature"; 
	boundary="=-v6MQFj2xmVUDzYKVAsf+"


--=-v6MQFj2xmVUDzYKVAsf+
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Am Montag, den 23.09.2013, 18:10 +0300 schrieb T=C3=B6r=C3=B6k Edwin:
> On 09/23/2013 01:56 PM, Gerd Stolpmann wrote:
> > Hi,
> >=20
> > thanks for the patch. If I don't find another solution, I'll apply it.
> >=20
> > Currently, I'm revising SSL anyway - OCamlnet 4.0 will have its own
> > binding for GnuTLS, and this will give us a lot more freedom in the
> > design. In particular, the management of the TCP connection and the TLS
> > tunnel can be completely decoupled (i.e. TLS will appear as a separate
> > layer on top of the multiplex controller).
> >=20
> > (If you are curious:
> > https://godirepo.camlcity.org/wwwsvn/branches/onet4/code/src/nettls-gnu=
tls/?root=3Dlib-ocamlnet2)
>=20
> Interesting, does this mean that an application could choose between Open=
SSL and GnuTLS by simply
> linking with nettls.gnutls vs nettls.openssl? [*]
>=20
> [*] Or why not someone could contribute a nettls.nss, as Fedora seems to =
prefer it over GnuTLS (Debian
> on the other hand seems to default to GnuTLS in curl for example):
> https://fedoraproject.org/wiki/FedoraCryptoConsolidation

There will be just a module type TLS_provider that can be packed as
value and passed around, and it will be possible to have several
implementations for it (switchable even at runtime). GnuTLS serves
"only" as the implementation that is included. I don't know yet whether
I personally want to create another one - the existing binding for
OpenSSL is so minimal that it is hardly usable for anything else than a
simple client, so it would be some work to add all the missing
functionality. But if somebody else did it, I'd happily include it in
Ocamlnet. Same for NSS (which is probably easier to do).

Independently of the TLS implementation, there will also be a parser for
X.509 certificates. This is already written (directly in OCaml), and
will give you complete access to all the details.


Gerd


> Best regards,
> --Edwin
>=20
>=20

--=20
------------------------------------------------------------
Gerd Stolpmann, Darmstadt, Germany    [email protected]
Creator of GODI and camlcity.org.
Contact details:        http://www.camlcity.org/contact.html
Company homepage:       http://www.gerd-stolpmann.de
------------------------------------------------------------

--=-v6MQFj2xmVUDzYKVAsf+
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iQEcBAABAgAGBQJSQGCYAAoJEAaM4b9ZLB5T0n8H/j4CZmpu7uMgxxISLKn9FMOa
57PK2yGcJLFGMgtuq5zjD15o+TvSm3oU9Jgi1BufoLAj/swwj7dfmuo9tjDFysSQ
ERWxkDhSnkhnejtGGBn5SeRCLQVwriR1NEjPf7P3/OuaCSU2BJqLuIqhl4UblbRf
8Dr44jG15r+RIit91zm3mEOQ7K68a3EOCIUD+gdFwVsLuGxcO6d8Zliwl9QQ6pA4
iVyXAQcJpBXimp13+0WbfUtpzNt60M/koz2kxGzJShcXR/O7eytZZRBAImoPzhv7
t/Sn3wMN96HQizfcYrskwbEhnwMUudOZHu513KEOVUbrEOb2eF9eOYWNz3IZRTM=
=aGyL
-----END PGP SIGNATURE-----

--=-v6MQFj2xmVUDzYKVAsf+--



--===============5315980417192870443==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk
--===============5315980417192870443==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ocamlnet-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ocamlnet-devel

--===============5315980417192870443==--