Re: Client-Server Protocol in a more secure way?

James Cloos <[email protected]> Fri, 16 Dec 2016 17:44:47 -0500
Newsgroups gmane.comp.telephony.fax.hylafax.devel
Message-ID <[email protected]>
>>>>> "LH" == Lee Howard <[email protected]> writes:

LH> and I haven't looked into it, specifically, but I would suspect
LH> that there are already system libraries available (maybe openssl,
LH> even) which would do the bulk of the work.

Yes, the tls should be done via some existing (set of) library(ies),
such as openssl, libressl, boringssl, gnutls, axtls, mbedtls,
matrixssl and/or botan.

The patch would need to do the ftp-protocol level work and call out to
the tls lib for the tls work.

Supporting more than one tls lib (noting that openssl < 1.1 and >= 1.1
have different APIs) is complicated.  I suspect, given that its language
and licence are most similar to hyla, botan might be the best choice.

-JimC
-- 
James Cloos <[email protected]>         OpenPGP: 0x997A9F17ED7DAEA6


____________________ HylaFAX(tm) Developers Mailing List ____________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
On UNIX: mail -s unsubscribe [email protected] < /dev/null