The caNl SSL/TLS and X.509 API

Slides from AHM

JAVA: HERE.

C: HERE.

C++: API initially following one for C is HERE.

OUTDATED materials, kept for reference

The original Vincenzo's proposal is here. It is not updated too meet the requirements list which was assembled later.

The next iteration, Java based quite strictly following JCA/JSSE architecture by Krzysztof here. TURNED DOWN as it is extremely hard to overcome JDK check for the presence of the 'CA' certificate constraint which is missing in case of Proxies.

The iteration no 3, again Java based by Krzysztof (only JSSE reused) here. Still only a subject for discussion.

-- KrzysztofBenedyczak - 11-Oct-2010