Ah, again, I should read stuff more carefully before I spout off at
the lip -- this is a utility to create proxy certificates, not
actually validate them.

I think it's a good thing to have as a standard utility, myself, and I
can't see much reason not to include it.

-Kyle H

On 9/29/06, Ivan R. Judson wrote:
> > First off, you need to get rid of the "all rights reserved"
> > copyright clause. Changing it so that it states you grant
> > usage and distribution rights with OpenSSL under its license
> > would be a good start. (Licensing, licensing, we all have to
> > worry about it. )

>
> Not a problem; is there boilerplate I should put in?
>
> > Next, create a diff -c (contextual diff) against the current
> > CVS, including changes to the makefiles.

>
> Ok, but that might be tricky; I've built this on windows :-)
>
> > Then, submit that diff as a patch against the current CVS to
> > rt@openssl.org.
> >
> > (At least this is how I presume things should be done. This
> > module may need to go into the contrib/ directory, as it does
> > affect validation and thus security.)

>
> That's easy enough -- I can follow the instructions.
>
> One question: What do you mean specifically by 'as it does affect
> validation'?
>
> Thanks,
>
> --Ivan
>
> > -Kyle H
> >
> > On 9/29/06, Ivan R. Judson wrote:
> > >
> > >
> > > Hi,
> > >
> > > Awhile ago I mentioned wanting to get proxy support (RFC 3280, yes
> > > it's expired, but in use) into openssl as simply as possible.
> > >
> > > I've built the attached module, that does what I wanted. What's the
> > > best way to try and get this integrated into the standard

> > distribution?
> > >
> > > Thanks,
> > >
> > > --Ivan
> > >
> > >
> > >

> >
> >
> > --
> >
> > -Kyle H
> > __________________________________________________ ____________________
> > OpenSSL Project http://www.openssl.org
> > Development Mailing List openssl-dev@openssl.org
> > Automated List Manager majordomo@openssl.org
> >

>
> __________________________________________________ ____________________
> OpenSSL Project http://www.openssl.org
> Development Mailing List openssl-dev@openssl.org
> Automated List Manager majordomo@openssl.org
>



--

-Kyle H
__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev@openssl.org
Automated List Manager majordomo@openssl.org