--On Thursday, February 21, 2008 12:06 AM -0800 Howard Chu <hyc(a)symas.com>
> I expect that a port to Mozilla's NSS wouldn't be
> too much more difficult, although of course Howard would be the person to
> ask for an estimate.
I would think there are other developers here who are familiar with
Mozilla NSS and can read the code in libldap/tls.c. It's certainly not
high on my list at the moment since OpenSSL works for me. One thing that
I find rather annoying about NSS is its use of a private
certificate/keystore that requires additional tools to manipulate.
When Stanford was looking at an OpenSSL alternative, Mozilla's NSS was
brought up then. There was a discussion on IRC's #ldap channel about it at
that time, IIRC, and it was found deficient in a number of areas. Not that
I recall what they all were. ;)
Principal Software Engineer
Zimbra :: the leader in open source messaging and collaboration