ssl layer 的實現

ssl 層是獨立於應用層和傳輸層的，SSL層的實現有openssl，mozilla的nss。

suse的iso包裏包括了nss不須要單獨安裝

What is Network Security Services (NSS)

NSS is set of libraries, APIs, utilities, and documentation designed to support cross-platform development of security-enabled client and server applications. It provides a complete open-source implementation of the crypto libraries used by Netscape and other companies in the Netscape 6 browser, server products from iPlanet E-Commerce Solutions, the Gateway Connected Touch Pad with Instant AOL, and other products.

How does NSS compare to OpenSSL?

OpenSSL is an open source project that implements server-side SSL, TLS, and a general-purpose cryptography library. It does not support PKCS #11. It is based on the SSLeay library developed by Eric A. Young and Tim J. Hudson. OpenSSL is widely used in Apache servers and is licensed under an Apache-style licence.

NSS supports both server and client applications as well as PKCS #11 and S/MIME. To permit its use in as many contexts as possible, NSS is licensed under both the Mozilla Public License and the GNU General Public License. You may choose to use the code either under the terms of the MPL or under the terms of the GPL.

Can I use NSS even if my application protocol isn't HTTP?

Yes, SSL is independent of application protocols. It works with common Internet standard application protocols (HTTP, POP3, FTP, SMTP, etc.) as well as custom application protocols using TCP/IP.

 

https://developer.mozilla.org/zh-CN/docs/NSS_FAQ