Description
Right now ReactOS doesn't have built-in SSL/TLS support. Main reason being that the secure channel provider (a library called `schannel.dll`) is from Wine and is intrinsically bound to GnuTLS, which in turn is big, convoluted, and hard to compile in a Win32 environment.
Talking in IRC there was some agreement on partially forking schannel and switching to a smaller, more manageable SSL provider that could be compiled and included in the mainline .iso image. SSL is increasingly important nowadays for accessing Internet services.
OpenSSL is even more bloated than GnuTLS and potentially insecure. On the other hand there are smaller, barebones, modular alternatives like PolarSSL.
Licensed under the GPL, with equivalent functionality, well audited, and with substantially less code.
It might be a good match for this kind of project, giving ReactOS the SSL it needs.
References:
https://polarssl.org/tech-updates/blog/providing-assurance-and-trust-in-polarssl
https://polarssl.org/tech-updates/blog/polarssl-not-vulnerable-to-poodle-against-tls
Attachments
Issue Links
- blocks
-
CORE-3388 SSL not supported; wininet isn't compiled with SSL support
-
- Resolved
-
-
-
- Resolved
-
-
-
- Resolved
-
-
-
- Resolved
-
- relates to
-
-
- Resolved
-