I have some interest in reducing the deployed footprint for libssl and
libcrypto, and would like to expand on the build options that allow
the exclusion of {IDEA|RC2|etc.}. It's a little trickier, but
I have in mind deploying both clients and servers using only:
DHE-DSS-RC4-SHA
I'll need to retain RSA and MD5 because they will be used in signing
certs, since verification of RSA signatures is so much faster -- but
I won't need or want: blowfish, rc2, rc5, idea, des, etc.
Any suggestions? Has anyone been doing this? The above cipher
is really only a TLS combo, AFAIK, so could I also eliminate some
of the SSLv23 code?
Including everything is great for a command line tool, but
I'd like to reduce the barriers to downloading a product with
embedded SSL.
Ta,
Michael
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
