Yu Xiangning wrote: > This sounds like a fun project. > > Just curious about the implementation, are you planning to fit this in > Volo? Currently the KSSL implementation is based on STREAMS. >
Yes. I will add this to the list of proposed enhancements. We will need help from the Volo team. Let us start a discussion on this on the project mailing list after it is set up. Thanks, -Krishna > - yxn > > Krishna Yenduri wrote: > >> Hello, >> >> We would like to start a Kernel SSL Enhancements project. >> We are requesting endorsement from the security community >> and the networking community. >> >> Thanks, >> -Krishna >> >> >> -- OPENSOLARIS PROJECT PROPOSAL -- >> >> >> Project Name: >> Kernel SSL Enhancements >> >> >> Short Name: >> kssl >> >> >> Project Synopsis: >> Kernel SSL Enhancements to make it more widely usable. >> >> >> Project Purpose: >> >> OpenSolaris has a kernel level SSL server proxy (KSSL) that >> can be used for improved SSL performance on the server side. >> It can be configured as a proxy for a non-SSL server >> (e.g. web servers like Apache and Sun web server) to communicate >> with a SSL client. >> >> There is an ongoing effort to add new features to KSSL. >> This project proposes to provide a place for that ongoing effort. >> >> Possible initial enhancements include: >> * Debugging tools and scripts >> * Add IPv6 support >> * Add support for TLS 1.1 >> * Performance optimizations >> * Add support for client authentication >> * Add support for ECC cipher suites >> >> A new mailing list [EMAIL PROTECTED] is requested. >> >> >> Proposed Community Sponsors: >> Security and Networking >> >> >> Participants: >> Project leads: >> Krishna Yenduri (O.S. id: krishna), primary contact >> Kais Belgaied (O.S. id: kais) >> Vladimir Kotal (O.S. id: vkotal) >> >> Other Participants: >> Darren Moffat (O.S. id: darrenm) >> Pallab Bhattacharya (O.S. id: pallab) >> >> Other interested participants: please speak up, or join the project >> list once we have it running. Contributions of both code and review >> time are obviously quite welcome; there's a lot of work to be done >> here. >> >> _______________________________________________ >> networking-discuss mailing list >> [email protected] >> > _______________________________________________ > networking-discuss mailing list > [email protected] > _______________________________________________ networking-discuss mailing list [email protected]
