[Help-gnutls] Re: GnuTLS vs OpenSSL vs NSS

[Daniel Kahn Gillmor]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu 2007-05-03 15:38:35 -0400, Simon Josefsson wrote:

> Right, I think we should mention this.  There is no equivalent feature
> in GnuTLS yet, but I'm working on PKCS#11 support to address one aspect
> of this (client smart card authentication) and made the first release a
> few days ago.

i'd be interested in reviewing this, if you've got test cases that
need it.  Sorry that i missed the initial announcement.  i use an
eGate smartcard for daily (hooked in via opensc and openct) via PAM
and openssh [0], and i've got a spare device i could test with.

Can you point me towards something to test?

> Btw, I'd like to add other free TLS libraries to the list.  That's
> why I made the implementations have one row each in the tables,
> rather than having the implementations be one column each.  This
> allows the list of implementations to be added easily, without
> clobbering the page too much.

these might be worth including:

http://yassl.com/
http://www.matrixssl.org/

(and soliciting feedback from their developers would be a good thing
for the page, too)

Regards,

        --dkg

[0] http://lair.fifthhorseman.net/~dkg/egate/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.8+ <http://mailcrypt.sourceforge.net/>

iD8DBQFGOj/tiXTlFKVLY2URAkbNAJ9KYYeNEM93A6xMSkrtUlb5oRTMTgCeJ3Wq
WGik+SvUWC6vXMoCpIfkqsw=
=Jenp
-----END PGP SIGNATURE-----