[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: moznss, gnutls, openssl



Chuck Theobald wrote:
What is the current wisdom regarding which tls library to use?

I've got a version 2.4.39 installation on RHEL 6.6 for which I cannot
get tls to work. I end up with the "TLS: can't connect: TLS error
-5938:Encountered end of file." error. Likely a misconfiguration of
moznss, though I followed one set of directions using certutil, but lack
the proper setting for my ldap TLSCACertificateFile.

My Debian-based ldap servers run with either openssl or gnutls.

Stick with OpenSSL - it's most heavily used, most frequently tested, and most commonly documented. MozNSS is the oldest and most "mature" code base but architecturally it is still very immature and it has a long way to go before its design is generally usable. GnuTLS is a travesty.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/