Bugs item #1924441, was opened at 2008-03-24 11:59
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1924441&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: SSL/TLS
Group: portability problem
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: Scott Cantor (scantor)
Assigned to: Daniel Stenberg (bagder)
Summary: SSL callback option with NSS-linked libcurl

Initial Comment:
I got a report that Fedora is now linking libcurl to NSS instead of OpenSSL, and I think there's a portability issue for applications using the SSL context callback option, since at least the OpenSSL version of that feature uses an OpenSSL-specific structure.

I think the NSS implementation may just not support the callback option yet, but I'm not sure because the code was failing a bit earlier, when setting the allowable cipher suites.

Regardless, if it had run, it would have crashed, and that's not good either.

I would say that use of the context option might need some kind of way to protect against this, but I'm not sure what to suggest yet.

Perhaps there needs to be an option added to "set" the allowable SSL implementation(s) so that code that's using non-portable options can detect a failure at runtime during curl handle setup and fail out before the code just breaks during a connection.

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=1924441&group_id=976
Received on 2008-03-24