Joseph Bruni wrote:


On Apr 11, 2004, at 1:44 PM, Garrett Kajmowicz wrote:


They don't do quite the same thing. RSAPrivateKey_dup() et al. do not accept a
const RSA*, they accept a RSA*. The i2d function, however, does accept a
const RSA*, so I've resorted to that pair.




I believe that the inconsistent use or lack of "const" is due to laziness of the programmers. I too hope that the project will mature in a number of ways:

1) proper declarations (const)

2) proper and complete documentation (elimination of broken symlinks in the man directories)

3) Removal of C preprocessor for generation of functions and types

4) Use of autoconf in a way that is consistent

I'm seeing a number of companies aligning themselves with CDSA rather than OpenSSL. This includes funding. OpenSSL is a great library once you figure out how things work, but it's a steep learning curve. The lack of documentation is a huge issue.

http://www.opengroup.org/security/l2-cdsa.htm

So where are your patches, you lazy programmer?


--
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to