Contribution to OpenSSL

View: New views
2 Messages — Rating Filter:   Alert me  

Contribution to OpenSSL

by Tomas Vrabel :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,
I have sent this mail once before, tell me if it's offtopic or where
should I ask about contributing to OpenSSL.

I have developed library based on OpenSSL 0.9.8 that implemented ETSI
standard for long term signatures. It allows electronic signatures to
be valid for long period of time (many years) by adding timestamps as
an unsigned attributes. I was thinking about adding my library to
official OpenSSL library, OpenSSL version 0.9.9 will support CMS
standard and it can be useful to create long-life signatures.
Are you interested in my contribution?

Tomas Vrabel
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...

Re: Contribution to OpenSSL

by Patrick Patterson-3 :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

On July 17, 2008 03:19:54 pm Tomas Vrabel wrote:

> Hi,
> I have sent this mail once before, tell me if it's offtopic or where
> should I ask about contributing to OpenSSL.
>
> I have developed library based on OpenSSL 0.9.8 that implemented ETSI
> standard for long term signatures. It allows electronic signatures to
> be valid for long period of time (many years) by adding timestamps as
> an unsigned attributes. I was thinking about adding my library to
> official OpenSSL library, OpenSSL version 0.9.9 will support CMS
> standard and it can be useful to create long-life signatures.
> Are you interested in my contribution?
>
This question would probably be better answered if you post a link to your
code, documentation on the code, and the license under which your code is
written.

You may also want to include what you mean when you say "library based on
OpenSSL" - because there are LOTS of libraries based on OpenSSL (I've even
written a couple :), and most of them don't necessarily make sense to include
in OpenSSL itself (Pathfinder and WvStreams definitely do NOT make sense to
include in OpenSSL, despite the first depending rather heavily on the native
routines provided by OpenSSL) . Do you mean an extension to the OpenSSL
libraries, so that 'openssl verify' can correctly validate long life
signatures? If so, then probably the right thing to do is to create a patch
to OpenSSL itself, and submit that via the RT system.

Have fun.

--
Patrick Patterson
President and Chief PKI Architect,
Carillon Information Security Inc.
http://www.carillon.ca
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@...
Automated List Manager                           majordomo@...
LightInTheBox - Buy quality products at wholesale price!