develooper Front page | perl.perl5.porters | Postings from December 2021

Re: OpenSSL alternative support WAS Re: Pre-RFC: support httpsout-of-the-box

Thread Previous | Thread Next
From:
Yuki Kimoto
Date:
December 9, 2021 00:11
Subject:
Re: OpenSSL alternative support WAS Re: Pre-RFC: support httpsout-of-the-box
Message ID:
CAExogxO-=HoA77HA8QXQi8q7dV+foaf+W_Tq4QXd2Zk6CfRpyg@mail.gmail.com
2021-12-9 4:12 Paul "LeoNerd" Evans <leonerd@leonerd.org.uk> wrote:

> Two other facts which seem relevant, that haven't been mentioned so far:
>
>   1) Perl is currently supported on many more platforms than OpenSSL is
>
>   2) OpenSSL requires perl during its build process
>
> For both of these reasons, core perl *cannot* require OpenSSL.
>
>
For these reasons, in many cases what Perl users need to do for
SSL/TLS support is install IO::Socket::SSL(this depends Net::SSLeay).

This needs one action. However, it's easy.

If the distribution contains IO::Socket::SSL, Net::SSLeay and OpenSSL
libraries, users use HTTPS from the beginning(For example, Strawberry Perl)

On the other hand, I feel managing the SSL library and CA cert(like
Mozilla::CA provides) by ourselves is too risky and costly(although I want
to access HTTPS by default)

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About