* Bastien ROUCARIES:

> Fedora created a open SSL compat library based on libnss.

It doesn't work all that well because there is no way to implement
host name checking.  The OpenSSL API it's based on did not have an
interface for host name verification, and the compatibility library
does not duplicate enough of OpenSSL's ASN.1-related functionality so
that applications can implement the verification themselves.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/87r48uhfmx....@mid.deneb.enyo.de

Reply via email to