>..but still the i could not achive the size i wanted.
Well, I do not know the restrictions you have and whether
you are mainly interested to reduce the library siszes or
the total size of the libraries plus the openssl executable.

>I was wondering if there was a way to get away some of
>the stuff like engine,cast,Pkcs12.etc under
>openssl-0.9.7/crypto/.

>Most of these are the supporting files for "openssl"
>utility (meaning "openssl -list" command).

My objective was twofold: I wanted to keep the external
lib API intact so that the many applications which are based
on the OpenSSL libraries could still be linked against it.
This did not mean that all API calls have functional code
behind them. I made use of all the conditional compilation
directives I could and suppressed the code generation for
all text messages.

Second, I have taken out non-essential code to reduce the
openssl executable. The only command line parameters which
I have have left functional are genrsa, req, s_client,
s_server and version. This way I have a bare bones openssl
executable for those clients which want to create their key
pair and certificate request themselves.

I also built shared libraries and dynamically linked the
openssl executable to them dynamically. The OpenSSL team has
come to the same conclusion starting with version 0.9.7, as I
see :-)

Regards, Martin


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to