Hi Nadeem.

> Are there fairly large modules/units that can be taken out of an OpenSSL
> build without impacting SSL 3.0/TLS functionality (e.g., non-essential
> modules/algorithms, etc.)

> We are building OpenSSL into a codespace sensitive system, i.e., embedded
> system.

I'm trying to do same work.

> If anybody knows, which modules can we remove and how?

For now I discovered following defines NO_ERR, NO_STDIO and NO_FP_API which
can be set to disable some unneeded in embedded enviroment functions. But
with some of this defines OpenSSL won't compile without slight
modifications.

There are one more swith NO_OBJECT, but I am not of it's impact on SSL/TLS
functionality. Can anyone clear this?

And of course I am disable unused cyphers and hashes. For now I am define
NO_RC5, NO_BF, NO_CAST, NO_RIPEMD and NO_MDC2.

Best regards,
Nick

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to