4 ms·
> a 3rd open source product that's as mature. NSS, which is used by Mozilla and Chrome. For Apache, just google mod_nss or read this: https://stomp.colorado.ed
by niels_olson 13y ago
> a 3rd open source product that's as mature.
NSS, which is used by Mozilla and Chrome. For Apache, just google mod_nss or read this: https://stomp.colorado.edu/blog/blog/2010/06/04/on-setting-up-mod_nss/ https://stomp.colorado.edu/blog/blog/2010/06/04/on-setting-u...
It looks like NSS isn't supported on nginx. Hope somebody puts that on their todo list!
- danudey 13y agoNSS is more complicated, for a lot of reasons. As I recall, it handles its own keystore which it doesn't share with other implementations (e.g. the ca-certificates package in Ubuntu/Debian); it requires you to initialize the keystore manually and teardown when you're done, but sometimes you don't know if anything else has done the initialization, so you don't know if it's safe for you to tear it down. There are other issues as well; not blocking problems necessarily, but reasons why it might not be a great implementation or why it would break the way current SSL works for distro maintainers and users.