[Pidgin] #15172: Windows: Schannel based SSL/TLS implementation

[Pidgin]

#15172: Windows: Schannel based SSL/TLS implementation
---------------------------+------------------------------------------------
 Reporter:  mback2k        |        Owner:           
     Type:  enhancement    |       Status:  new      
Milestone:                 |    Component:  libpurple
  Version:                 |   Resolution:           
 Keywords:  ssl tls win32  |  
---------------------------+------------------------------------------------

Comment(by mback2k):

 Great! Sorry, I haven't responded earlier since I didn't receive email
 notifications about your replies.

 @datallah: Yes, the OpenSSL dependency could be eliminated on Windows.
 @rekkanoryo: Yes, using the Windows Schannel API allows Pidgin to directly
 validate against the Windows Certificate store. That basically just
 happens behind the scenes and it's also possible to optionally implement
 our own validation.

 On the other hand Daniel Stenberg (curl project leader) and I were
 thinking that libpurple/Pidgin would also be a good candidate for a
 project which could use a generic SSL/TLS abstraction layer. Since libcurl
 already supports 9 different SSL/TLS implementations (state of the current
 development version), we would start of my separating the internal
 abstraction layer into it's own library. Then we would have to make sure
 that the design and architecture are not only fitting into the curl
 project, but are also fulfilling the requirements of other projects, like
 libpurple.

 But this is a whole other topic. The question is: do we want to proceed on
 adding Schannel support using libpurple's abstraction layer or do you want
 to participate in the development of a generic abstraction library?

 See the following Twitter conversation for more information.
 https://twitter.com/mback2k/status/217502425442029570

 I would love to hear your opinions on this. Thanks in advance!

 Best regards, Marc

-- 
Ticket URL: <http://developer.pidgin.im/ticket/15172#comment:3>
Pidgin <http://pidgin.im>
Pidgin