OpenSSL in Python (move to variant?)

[Joshua Root]

On 2011-11-24 15:52 , Ryan Schmidt wrote:
> 
> On Nov 22, 2011, at 19:50, Eric A. Borisch wrote:
> 
>> OpenSSL's license negatively impacts the usefulness of the binary
>> distribution process within MacPorts.
> 
> I also just found out about this:
> 
> http://ludovicrousseau.blogspot.com/2011/08/mac-os-x-lion-and-openssl.html
> 
> It says Apple has deprecated the use of OpenSSL as of Lion and may remove it entirely in a future OS version, and suggests that developers use Apple's own Common Crypto instead. It's apparently available starting in Leopard, so if we wanted to do that, it wouldn't be too awful for backward compatibility. (Lots of ports are already broken on Tiger for other reasons.)

CommonCrypto is there on Tiger; we use it for hashes (and did during the
period where the code for doing them with OpenSSL was removed).

How does the difficulty of converting OpenSSL-using code to CommonCrypto
compare to GnuTLS or NSS?

- Josh