[Pidgin] #15308: SSL support appears to have been written by a lobotomy victim

Pidgin trac at pidgin.im
Wed Sep 5 07:39:10 EDT 2012


#15308: SSL support appears to have been written by a lobotomy victim
--------------------+-------------------------------------------------------
 Reporter:  athena  |        Owner:           
     Type:  defect  |       Status:  new      
Milestone:          |    Component:  libpurple
  Version:  2.10.6  |   Resolution:           
 Keywords:          |  
--------------------+-------------------------------------------------------

Comment(by deryni):

 Is there an actual complaint here?

 We don't control what distributions choose to use by default.

 Over time one or the other of the ssl plugins has had issues that the
 other one did not (largely due to issues in the underlying libraries but
 not always). People have thus had to choose which set of breakage they'd
 prefer. Distributions appear, largely, to have chosen NSS as their SSL
 library of choice for whatever reasons they have seen fit.

 It is regrettable that our NSS plugin is not as complete as our gnutls
 plugin (assuming that is the main thrust of the this excessively verbose
 and meandering ticket). Patches are always welcome.

 OpenSSL is a non-starter as the legal issues cannot be glibly wished away
 because you want them to be. Even if we were to choose to include support
 for it (support which does exist in at least some places), which would be
 legal for us to do as far as I'm aware, it wouldn't be legal for any
 distributions that ship binary packages to distribute those packages built
 with that turned on and so it would gain approximately nothing of real
 value for all those poor distribution package users you seem so worried
 about.

 Most users don't even know what SSL is let alone care which of their
 available options for using it is actually in use and those that do care
 likely only build the one they want (as is the case for every distribution
 I've ever seen).

-- 
Ticket URL: <http://developer.pidgin.im/ticket/15308#comment:2>
Pidgin <http://pidgin.im>
Pidgin


More information about the Tracker mailing list