| |||||||||||||
TLS renegotiation vulnerabilityTLS renegotiation vulnerabilityPosted Nov 20, 2009 3:28 UTC (Fri) by cras (guest, #7000)In reply to: TLS renegotiation vulnerability by Cyberax Parent article: TLS renegotiation vulnerability
I think a big problem with OpenSSL being a magic box is the lack of documentation, and APIs that
are quite horrible if you want to do something a bit differently than everyone else. Usually whenever I want to add a new TLS related feature I'll just try to find out existing code that does something similar (because the functions' manual pages don't exist or are almost empty). And when that fails (and it often does) I'll just have go read the OpenSSL code directly. And when I find that there doesn't exist an easy way to do what I want, I'll just go and copy&paste a large chunk of OpenSSL code to my code and modify it slightly..
I guess I should start looking at GNUTLS again, maybe things are better there..
(Log in to post comments)
TLS renegotiation vulnerability Posted Nov 21, 2009 18:37 UTC (Sat) by kleptog (subscriber, #1183) [Link]
I've done a little programming with GNUTLS and one things is for sure, the interface is much nicer. It was created at a time when TLS was much more standard, and certain features went it from the beginning. Like BIOs in OpenSSL are in the from the beginning. Non-blocking is supported throughout.
Certainly I found it much nicer.
|
|||||||||||||