<br><br><div class="gmail_quote">2010/11/30 Arnaud Quette<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><br><div class="gmail_quote">2010/11/28 Arjen de Korte<span dir="ltr"></span><div class="im">
<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Citeren Arjen de Korte<div><br>
<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Log:<br>
Use the 'nss_compat_ossl' compatibility layer to use the Mozilla NSS library instead of OpenSSL (we might want to include native support in the future, but this will at least allow a quick migration for testing purposes)<br>
</blockquote>
<br></div>
I don't recall that we ever discussed the possibility of adding NSS support by using the 'nss_compat_ossl' OpenSSL compatibility layer. Just to be sure, I added this to see if this is a workable solution. On my (openSUSE) system this seems to build without problems.<br>
<br>
Having said that, I'm not sure how future proof this will be. It could be that in the end we want to use the native NSS functions instead. I didn't spend any time on this (and have no desire to do so either) so I have no idea how much work that would be (but maybe our new team member Emilien can work this out).<br>
</blockquote></div></div><br>considering the availability of nss-compat vs. nss, I doubt it's a good idea to go this way.<br>Emilien has made a few tests on Debian based system, and the conclusion are clearly in favor of nss (ie not compat).<br>
<br>though the underlying idea of nss-compat was good, it seems not that people / distro have adhered to this approach.<br>I've asked Emilien to concentrate on a native nss implementation.<br><br>FYI, his first investigation seems to show that implementation won't be the hardest part, but documentation and setup will...<br>
It also seems, after an update round on my side, that the standardization on nss pushed by Fedora and Suse has not yet made its way.<font color="#888888"><br>
</font></blockquote></div><br>just to clearly disambiguate the situation: as from now, we'll be abandoning the nss-compat work.<br>Arjen: if you however want to continue testing this approach (which IMHO would be a waste of time), could you please create another branch for this?<br>
so that Emilien can concentrate on the native NSS implementation...<br><br>cheers,<br>Arnaud<br clear="all">-- <br>Linux / Unix Expert R&D - Eaton - <a href="http://powerquality.eaton.com" target="_blank">http://powerquality.eaton.com</a><br>
Network UPS Tools (NUT) Project Leader - <a href="http://www.networkupstools.org/" target="_blank">http://www.networkupstools.org/</a><br>Debian Developer - <a href="http://www.debian.org" target="_blank">http://www.debian.org</a><br>
Free Software Developer - <a href="http://arnaud.quette.free.fr/" target="_blank">http://arnaud.quette.free.fr/</a><br><br>