BIND 10 #2822: remove dependecies to OpenSSL, use Botan instead
BIND 10 Development
do-not-reply at isc.org
Mon Mar 4 16:39:11 UTC 2013
#2822: remove dependecies to OpenSSL, use Botan instead
-------------------------------------+-------------------------------------
Reporter: cas | Owner:
Type: enhancement | UnAssigned
Priority: medium | Status: new
Component: build system | Milestone: New
Keywords: | Tasks
Sensitive: 0 | Resolution:
Sub-Project: Core | CVSS Scoring:
Estimated Difficulty: discuss | Defect Severity: N/A
Total Hours: 0 | Feature Depending on Ticket:
| Add Hours to Ticket: 0
| Internal?: 0
-------------------------------------+-------------------------------------
Comment (by cas):
My initial comment refers to the use of the _ssl module to create a SSL
secured communication channel between a client UI and the server parts of
BIND 10. I'm not sure PKCS# 11 or SoftHSM will provide a solution here.
There are Python bindings to Botan that could possibly be used to create a
SSL/TLS connection.
It is possible to compile Python (3) without _ssl, so OpenSSL is not
required.
I agree the on standard (Linux) installations, OpenSSL is almost always
there and is pulled in as an dependency to Python3, but in some
environments a minimal installation is required for security audit
reasons, and there it would be good to be able to have a BIND 10
installation without OpenSSL in addition to Botan.
--
Ticket URL: <http://bind10.isc.org/ticket/2822#comment:2>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list