I'm trying to merge the work from Martin Witzel (openssl-e dated from Nov. 2003) to reduce the OpensSSL footprint (for 386'er x86). With OpenSSL 0.9.7 is was able to reduce the library size down to

1070834 bytes libcrypto.a
159774 bytes libssl.a

if only DES, MD5, RSA and SHA are used. Now with OpenSSL 0.9.8 the libs are much bigger

1208692 bytes libcrypto.a
202860 bytes libssl.a

and I was not able to remove DSA (yes, I know RFC2246 requires DSA but OpenVPN is linked staticly without TLS support so this is not a concern). The resulting OpenVPN binary is 208623 bytes larger which quite much.

I have a couple of questions:

a) I wonder if there is anyone else working on something to reduce the footprint from OpenSSL?

b) Is there a document that describes how to create a "small" OpenSSL lib?

c) If I get the previous openssl-e patch set working again is there a way to get the patch merged to the OpenSSL core?

My goal is to get a 300kb OpenVPN binary (x86) with DES and SHA working.

--
Claas Hilbrecht
http://www.jucs-kramkiste.de

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to