Dear OpenSSL community, I wrote to the OpenSSL-dev list about 6 months ago, mentioning my work developing a Web-Of-Trust Authentication System for OpenSSL connections. There was a little bit of interest, and one person who helped a bit with the code...
However 6 months later, I'm basically in the same situation: (a) I have a functioning implementation of Web-Of-Trust in OpenSSL [1] (b) I'd like transform this into OpenPGP compliant system. (c) I want to submit this back to OpenSSL, when its ready, so everyone can use OpenPGP certificates for secure sockets! The only thing that has changed, is the application ( retroshare [2] ) has progressed significantly and has a nice new GUI! So this time, I thought I'd try the openssl-users list..... Is there anyone interested in helping me get a Web-Of-Trust Authentication system ready for inclusion in OpenSSL? Thanks, DrBob. references: [1] OpenSSL-xpgp: http://www.lunamutt.com/retroshare/openssl-css.html [2] Retroshare: http://sourceforge.net/projects/retroshare/ --------------------------------------------------------------------- My Original Email follows. --------------------------------------------------------------------- >I've been developing an private peer-to-peer application based on >OpenSSL >(Thank you, to all the developers who have put time into OpenSSL) > > >Initially I used X509 certificates for the authentication between >peers, However I quickly realised that a hierarchical certificate >structure was not ideal, and that a Web of Trust system >would be required. > >So I've implemented an web-of-trust style authentication system >inside OpenSSL. It is basically a combination of OpenPGP style >certificates and SSL3/TSL1 connection > >After 6+ months of work, I've finished the first working prototype. >and would like to share it with the OpenSSL developers of the >world (and contribute back). Hence this email! > >So: >(1) Is OpenSSL interested in including this work into the > code base (provided its up-to-scratch etc...) ? >(2) If so, is there anyone who could [guide/help] me to clean it up > and correctly merge the code? >(3) What are the procedures for doing so (I'm new around here) > >I haven't put the code on the website yet, (soon... there is never >enough time to get everything done). but you can see it at work >in my application: RetroShare available at http://www.lunamutt.com. > >Looking forward to any comments. > >Thanks. > > Dr Bob. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]