Re: SSPI and OpenSSL

From: Alun Jones [MSFT] (alunj_at_online.microsoft.com)
Date: 06/24/04 

Date: Thu, 24 Jun 2004 09:52:06 -0700

"henghuei@yahoo.com" <henghueiyahoocom@discussions.microsoft.com> wrote in
message news:74D1B5B6-A485-4B48-AAD7-CC5FE935D631@microsoft.com...
> Does Microsoft SSPI support OpenSSL?
> If not, could you suggest ideas on how to create a common set of APIs
> which encapsulate Microsoft CryptoAPI and OpenSSL?

The two can certainly communicate with each other using SSL and TLS -
because they are both implementations of APIs to create SSL and TLS
communications, the communications work fine together. The APIs are
significantly different, so a program written for one will not compile for
the other without a lot of re-writing.

There are likely to be a few minor clashes between assumptions, but they are
few and far between - the worst example I can think of right now is that
OpenSSL likes to send empty messages (to deal with a buggy implementation of
SSL on a third platform), and that can confuse some programs into thinking
that the connection is closed, if they don't allow for it. Since the two
protocols are designed for inter-platform communication, a lot of work is
put in (on both sides) to ensure that communications occur in as standard a
way as possible.

Alun.
~~~~