On Tue, 26 Apr 2005, Elliot Foster wrote:
Charlie Brady wrote:...
sslserver (http://www.superscript.com/ucspi-ssl/sslserver.html) is a problem for anyone who wishes to distribute binaries, as its source code doesn't come with any license. The provenance of the source code isn't clear either, although clearly much of it comes from djb.
Is this like a replacement for sslio (http://smarden.org/ipsvd/)?
No. sslserver long predates sslio, so if anything, sslio would be a replacement for sslserver. But sslio only implements SSL wrapping, whereas sslserver also does TCP connection management. sslserver would be more like a combination of tcpsvd and sslio.
Pertenant to this discussion however is the fact that sslio uses the matrixSSL library, the GPL version of which does not support TLS 1.0.
My brief investigation of a set of SMTP clients revealed that none of Kmail, Mozilla mail or Evolution would accept SSL 3.0 in response to STARTTLS, whereas IIRC they were all happy enough with SSL 3.0 for an SSMTP connection. Go figure...
