--On Thursday, February 21, 2008 12:06 AM -0800 Howard Chu hyc@symas.com wrote:
I expect that a port to Mozilla's NSS wouldn't be too much more difficult, although of course Howard would be the person to ask for an estimate.
I would think there are other developers here who are familiar with Mozilla NSS and can read the code in libldap/tls.c. It's certainly not high on my list at the moment since OpenSSL works for me. One thing that I find rather annoying about NSS is its use of a private certificate/keystore that requires additional tools to manipulate.
When Stanford was looking at an OpenSSL alternative, Mozilla's NSS was brought up then. There was a discussion on IRC's #ldap channel about it at that time, IIRC, and it was found deficient in a number of areas. Not that I recall what they all were. ;)
--Quanah
--
Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration