Hi,
I just started getting into the SSL stuff for a simple server... I was
shocked!
Basically there is lack of documentation out there and the API is
non-obvious, big and would seem to require too many function calls for
little functionality (Someone once said that good API's have a small
surface area that encapsulates high functionality.. but that's open to
discussion).
I'm guessing that the documentation situtaion will improve as these things
always do, but I guess that most of the API will be fixed since
compatablity with previous apps will be wanted.
So I ask, will there be as simplified API for people like me who want to
add SSL into an app without spending more than a day working it out?
Something along the lines of...
ssock_t ssocket()
int sbind(ssock_t,inaddr,len,cert_t?)
ssock_t saccept(ssock_t,inaddr,len)
int sconnect(ssock_t,inaddr,len)
int sread() swrite() sclose()
sgetfd() <- for poll/select support
...would be very nice as it sticks with the Berkely socket paragdm that
everyone knows and uses.
Doing this would surely make it easy for everyone to add SSL to apps if
needed, which would help the spread of SSL into further apps.
At the moment I think I'm going to pass on openssl - the need isn't urgent
enough for the time investment (and unfortunately stunnel isn't suitable
either).
Mike
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
