Re: ssl apis
Re: ssl apis
- Subject: Re: ssl apis
- From: Doug Mitchell <email@hidden>
- Date: Tue, 30 Dec 2003 12:15:43 -0800
On Dec 27, 2003, at 12:07 PM, tuviah snyder wrote:
Implementing SSL support. Apple's SSL APIs looks very similar to
OpenSSLs
API.
I presume you're referring to the interface declared in the headers in
/usr/include/openssl?
Therefore the obvious question, anyone have experiance with them both
what
are the potential pro/cons such as loading the default root CAs,
dependencies (ran into a few problems with libcrypto hope to avoid with
libssl).
The preferred SSL implementation on OS X is SecureTransport. Its
interface is declared and documented in <Security/SecureTransport.h>.
It's nothing like OpenSSL. All private key and certificate based
operations are tightly coupled with OS X's Keychain mechanism;
application code generally does not have to be concerned with root
certs at all (though options exist to specify your own on a
per-transaction basis). Mail.app and Safari both use SecureTransport
for SSL.
Sample code for both client and server side can be found here:
http://developer.apple.com/samplecode/Sample_Code/Security/SSLSample.htm
--dpm
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.
References: | |
| >ssl apis (From: "tuviah snyder" <email@hidden>) |