RFC: Adding Mac support to secur32/schannel.c

[James McKenzie]

On 1/28/11 9:36 AM, Juan Lang wrote:
> Hi Ken,
>
>> I'm planning to add an alternative implementation of schannel (SSL/TLS) support for the Mac.  The current implementation is based on GnuTLS.  That library is not typically found on Mac OS X.  Although packagers can build it and ship it and its dependencies with Wine for Mac OS X, I think it's better (especially for security-related functionality) to use the system-provided library.
> What's the issue with building GnuTLS?  Is it that GnuTLS doesn't
> support the Mac Keychain?  Is it that it's an external dependency?  If
> the latter, we already pull in quite a bit that isn't found on the
> Mac, so the incremental change isn't large.
>
The point is that MacOSX has built-in TLS support out of the box.  Why 
build GNU TLS when using MacOSX when it is not needed???

James McKenzie