Re: Thoughts on a new mscng backend

--===============0318408793==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="6imsbp4lr2isacbx"
Content-Disposition: inline


--6imsbp4lr2isacbx
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline

Hi,

On Thu, Jan 04, 2018 at 03:24:51PM -0800, Aleksey Sanin <[email protected]> wrote:
> That sounds like a great plan! I would recommend to use the
> skeleton folder to start.

Thanks for all the reviews, current master looks reasonable to me when I
compare 'make check' output of the mscrypto and mscng backends:

- 0 tests pass only on mscrypto
- 126 tests pass on both mscrypto and mscng
- 3 tests pass only on mscng (ecdsa signing with sha1/256/512)

I wonder what else is missing so it could be claimed that the mscng
backend is more or less a drop-in replacement for the mscrypto one.
There are two things I can think of:

- mscrypto supports reading your OS-level certificates and use that
  during e.g. signing.

- There are a few functions which are part of the mscrypto public API
  (e.g. xmlSecMSCryptoX509StoreAdoptKeyStore()) and there is no mscng
  equivalent yet. Those are probably interesting as e.g. LibreOffice
  uses those functions.

I plan to get to these two in the next few weeks. But is there anything
else larger missing?

Thanks,

Miklos

--6imsbp4lr2isacbx
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlrsfWUACgkQe81tAgORUJYfDwCfTQAmudTQRBjGdmW7Fd4XoCyz
wnoAnRMm/yKogVIKvuCsrfhGziHyrWas
=i370
-----END PGP SIGNATURE-----

--6imsbp4lr2isacbx--

--===============0318408793==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KeG1sc2VjIG1h
aWxpbmcgbGlzdAp4bWxzZWNAYWxla3NleS5jb20KaHR0cDovL3d3dy5hbGVrc2V5LmNvbS9tYWls
bWFuL2xpc3RpbmZvL3htbHNlYwo=

--===============0318408793==--