Re: [Evolution-hackers] Camel & smime

2002-06-06 Thread Mark Foster 

On Wed, 2002-06-05 at 14:41, Not Zed wrote:
> This was covered earlier.
> 
> The mozilla code, while great, is still in development and under
> constant change, there is no stable api we can develop to.  We dont
> really have the resources to help their effort either, unfortunately.
> 
> The pgp code we have just executes an external program and it works
> 'enough' for many people, even if it isn't ideal.  Once a better
> implementation comes along it can just slot in though.
> 

Which is what the mutt implementation does.
If the external call to openssl command is good enough for mutt, and
it's common to what evolution is already doing with gpg, why not go with
that and worry about nss integration for when (if) it becomes stable?

> And no, i dont think we do, to be honest.
> 
> 
> On Thu, 2002-06-06 at 19:09, Marc Jadoul wrote:
> > Hello guys,
> > 
> > I think you underestimate the difficulty to implement a serious s/mime
> > client!
> > With Mozilla there is much more than just an s/mime api. It permit also
> > to request certificate from a website, install them in a PSM, manage CRL
> > and OCSP, permit the user to trust a CA or not, via a GUI, you get smart
> > card support... All tested by a wide community.
> > On the other hand, I am sure OpenSSL is right for SSL/TLS servers and
> > eventually clients.
> > 
> > Additionnaly, it would be nice for Gnome users to be able to manage his
> > ceertificates in 1 place... like it is in MS products. Why not by
> > improving Mozilla code.
> > 
> > I really think that both projects would profit of it!
> > 
> > Marc Jadoul
> > 
> > On Wed, 2002-06-05 at 18:36, Jeffrey Stedfast wrote:
> > > Yea, I can take a look into it.
> > > 
> > > Jeff
> > > 
> > > On Wed, 2002-06-05 at 12:13, Ettore Perazzoli wrote:
> > > > On Tue, 2002-06-04 at 20:53, Not Zed wrote: 
> > > > > Thats an interesting patch, it all runs off the "openssl" command,
> > > > > didn't know it could do all that ... then again i didn't even know it
> > > > > existed.
> > > > > 
> > > > > Jeff, perhaps this is the answer? :)
> > > > This sounds like a great way to make it work simply and nicely.  :-) 
> > > > (While avoiding messy with NSS, which is always painful.)
> > > > 
> > > > At some point we should probably look into that?..
> > > > 
> > > > -- Ettore
> > > 
> > > 
> > > ___
> > > evolution-hackers maillist  -  [EMAIL PROTECTED]
> > > http://lists.ximian.com/mailman/listinfo/evolution-hackers
> > > 
> > 
> > 
> 
> 
> ___
> evolution-hackers maillist  -  [EMAIL PROTECTED]
> http://lists.ximian.com/mailman/listinfo/evolution-hackers



___
evolution-hackers maillist  -  [EMAIL PROTECTED]
http://lists.ximian.com/mailman/listinfo/evolution-hackers

Re: [Evolution-hackers] Camel & smime

2002-06-05 Thread Mark Foster 

On a side note, according to this URL, smime support has already been
added to mutt, so something's awry.
http://elmy.myip.org/mutt/smime.html

On Tue, 2002-06-04 at 11:44, Not Zed wrote:
> On Wed, 2002-06-05 at 15:46, Colin Walters wrote:
> > On Tue, 2002-06-04 at 23:13, Jeffrey Stedfast wrote:
> > > Once upon a time I had started implementing S/MIME using the Mozilla NSS
> > > libraries, but I had given up on that due to the API changing on me and
> > > the fact that the Mozilla developers told me that the API was not going
> > > to be stable anytime soon. Of course this was a long while back, so
> > > maybe things have changed?
> > 
> > Have you looked at using GNUTLS?
> 
> Hmm, not lately :)
> 
> > http://www.gnu.org/software/gnutls
> 
> Note that we are using libnss successfully for TLS (i.e. "ssl"), so this
> is of lesser importance.  It wouldn't be a significant chunk of work to
> have another tls library used instead though, probably a single
> camel-object 'stream' implementation would suffice infact (and a stream
> doesn't need to do much, just connect/read/write/disconnect), and maybe
> a couple of other minor patches.
> 
> Looking through the docs of gnutls it looks like it may have some of the
> features required, but it also doens't look like they're aiming it as a
> general purpose s/mime capable toolkit?
> 
> i.e.:
> 
> "Note that GNUTLS is not a generic purpose X.509 toolkit1.7. GNUTLS only
> includes the required, in order to use the TLS ciphersuites which
> require X.509 certificates."
>-> footnote links to Aegypten http://www.gnupg.org/aegypten/
> 
> And Aegypten is a toolkit/project to add s/mime to kmail & mutt (and
> coincidentally was just brought up on the evolution users list).
> 
> 
> 
> 
> ___
> evolution-hackers maillist  -  [EMAIL PROTECTED]
> http://lists.ximian.com/mailman/listinfo/evolution-hackers


___
evolution-hackers maillist  -  [EMAIL PROTECTED]
http://lists.ximian.com/mailman/listinfo/evolution-hackers