stunnel

chefle · Post by **chefle** » 2004-04-25 16:23

Hi all,

I only recently discovered that the peer<->hub traffic, which carries the user names and passwords in plain text, can be encrypted quite easily with 'stunnel'.

I never coded a line in c++, but may I ask the stupid question:
"Is it such a big deal to incorporate the encryption functions that libeay32 and libssl32 provide into dc++ to encrypt the p2p traffic ?"

I believe more than a handful of people would be hugely happy to find this feature included... I mean, it would simply be nice to have the encryption features of (uglyyyyy) dcgui combined with the beautiful dc++....

Appreciate any answer.

Greez.

Post by **GargoyleMT** » 2004-04-26 21:50

I split this off from the encryption protocol discussion, I think it's better in its own thread. =)

chefle · Post by **chefle** » 2004-04-29 03:28

I actually thought it was adequate to post in the encryption thread...
The thing is, I'm not really posting about stunnel, but asking whether it's a big deal to incroporate the openssl toolkit into dc++

cologic · Post by **cologic** » 2004-04-29 03:43

http://www.openssl.org/support/faq.html#LEGAL2

chefle · Post by **chefle** » 2004-04-29 04:10

Sorry, but what do you want to tell me? That the stumbling block in this matter is that there would need to be this additional statement ("with the additional exemption that compiling, linking, and/or using OpenSSL is allowed.") in the license.txt?

chefle · Post by **chefle** » 2004-04-29 04:19

Oh, now I get it. I should have asked before I used dc++ with stunnel.

cologic · Post by **cologic** » 2004-04-29 04:21

Using two programs in conjunction a for GPL purposes a derived product makes not.

chefle · Post by **chefle** » 2004-04-29 04:30

Sorry again, I didn't understand that statement. Do you want to say that you cannot incorporate openssl into dc++ because it's not allowed by the GPL?

Todi · Post by **Todi** » 2004-04-29 14:18

http://www.openssl.org/support/faq.html#LEGAL2 wrote:2. Can I use OpenSSL with GPL software?

On many systems including the major Linux and BSD distributions, yes (the GPL does not place restrictions on using libraries that are part of the normal operating system distribution).

On other systems, the situation is less clear. Some GPL software copyright holders claim that you infringe on their rights if you use OpenSSL with their software on operating systems that don't normally include OpenSSL.

If you develop open source software that uses OpenSSL, you may find it useful to choose an other license than the GPL, or state explicitly that "This program is released under the GPL with the additional exemption that compiling, linking, and/or using OpenSSL is allowed." If you are using GPL software developed by others, you may want to ask the copyright holder for permission to use their software with OpenSSL.

chefle · Post by **chefle** » 2004-04-29 14:55

Em yes, I read that

paragraph 1: "On many systems including the major Linux and BSD distributions"
> OK, we're not talking about Linux/BSD, so this paragraph is not interesting.

paragraph2:
a) "Some GPL software copyright holders"
> Now, who could that be? Jacek? cologic? The openSSL guys?

b) "claim that you infringe on their rights"
> Is this the case? Does anyone claim anything?

paragraph 3:
"If you develop open source software that uses OpenSSL, you may find it useful to choose an other license than the GPL, or state explicitly that "This program is released under the GPL with the additional exemption that compiling, linking, and/or using OpenSSL is allowed.""
> This is exactly the case for dc++. If it shall stay GPL'ed, the 'or' in the sentence applies: add that line to the license. That's it.

Someone might feel the need to explain what they want to say. Simply linking to or quoting a page doesn't explain anything. I read it (the first time already) and I didn't understand which part applied to this case, really.

Todi · Post by **Todi** » 2004-04-29 15:24

chefle wrote:> This is exactly the case for dc++. If it shall stay GPL'ed, the 'or' in the sentence applies: add that line to the license. That's it.

I believe this might pose a problem, but i'm not an expert on GPL, so i'll leave that for someone else to interprate.

Post by **GargoyleMT** » 2004-04-29 22:34

GNU/TLS is GPL compatible, but doesn't compile (as?) cleanly on windows
Microsoft also has an encryption library, I don't know if it does (or doesn't) implement SSL/TLS.