[Development] Hacking guide for Qt's SSL Support

[Craig.Scott at csiro.au]

On 03/01/2012, at 11:27 AM, Thiago Macieira wrote:

> On Tuesday, 3 de January de 2012 10.57.11, Craig.Scott at csiro.au wrote:
>> Unfortunately, OpenSSL is not part of the LSB, so if you want SSL support on
>> linux and you want your application to be LSB compliant, you end up having
>> to link in the OpenSSL libraries statically. That's not necessarily a bad
>> thing from a security point of view, but it is an annoyance. NSS, on the
>> other hand, *is* in the LSB. If NSS was able to meet Qt's needs, then it
>> would be useful to have a NSS backend. Obviously, if NSS has issues as you
>> mentioned, then that makes it a bit of a moot point. I don't think GnuTLS
>> is in the LSB, but the LSB navigator site is currently down so I can't
>> easily check.
> 
> I remember voicing my concerns about NSS when LSB decided to standardise on 
> it. The reason was then that Qt could *not* use NSS, since it was developed in 
> the US.


Is it still a concern now though after the US changed it's export restrictions last year?

--
Dr Craig Scott
Computational Software Engineering Team Leader, CSIRO (CMIS)
Melbourne, Australia