NSS Library?

Are there any Ruby libraries for NSS out there that I've missed?

I poked around a bit, but perhaps my google-fu was weak.

Thanks,

Dan

Is there a specific reason you want NSS, as opposed to e.g.:

···

On Fri, Jan 27, 2017 at 9:39 AM, Daniel Berger <djberg96@gmail.com> wrote:

Are there any Ruby libraries for NSS out there that I've missed?

Network Security Services (NSS) — Firefox Source Docs documentation

I poked around a bit, but perhaps my google-fu was weak.

Thanks,

Dan

Unsubscribe: <mailto:ruby-talk-request@ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk&gt;

--
Tony Arcieri

Because choice is good. :slight_smile:

···

On Fri, Jan 27, 2017 at 12:08 PM, Tony Arcieri <bascule@gmail.com> wrote:

Is there a specific reason you want NSS, as opposed to e.g.:

GitHub - ruby/openssl: Provides SSL, TLS and general purpose cryptography.

On Fri, Jan 27, 2017 at 9:39 AM, Daniel Berger <djberg96@gmail.com> wrote:

Are there any Ruby libraries for NSS out there that I've missed?

Network Security Services (NSS) — Firefox Source Docs documentation

I poked around a bit, but perhaps my google-fu was weak.

Thanks,

Dan

Unsubscribe: <mailto:ruby-talk-request@ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk&gt;

--
Tony Arcieri

Unsubscribe: <mailto:ruby-talk-request@ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk&gt;

Choice is generally bad in cryptography.

The OpenSSL gem has been receiving considerable attention and maintenance
lately.

NSS, though the de-facto library for browser-based SSL/TLS until recently
(Chrome has switched to BoringSSL), has an ugly reputation. It's built on
code which underwent mechanical translation from Java to C, and is
generally considered to be extremely byzantine. Some of its past
maintainers have been able to rewrite whole swaths of code faster than they
were able to locate and fix use-after-free bugs.

I strongly suggest using the OpenSSL extension/gem over trying to consume
NSS from Ruby.

Or you could use my libsodium binding if it meets your needs:

···

On Fri, Jan 27, 2017 at 12:11 PM Daniel Berger <djberg96@gmail.com> wrote:

Because choice is good. :slight_smile:

On Fri, Jan 27, 2017 at 12:08 PM, Tony Arcieri <bascule@gmail.com> wrote:

Is there a specific reason you want NSS, as opposed to e.g.:

GitHub - ruby/openssl: Provides SSL, TLS and general purpose cryptography.

On Fri, Jan 27, 2017 at 9:39 AM, Daniel Berger <djberg96@gmail.com> wrote:

Are there any Ruby libraries for NSS out there that I've missed?

Network Security Services (NSS) — Firefox Source Docs documentation

I poked around a bit, but perhaps my google-fu was weak.

Thanks,

Dan

Unsubscribe: <mailto:ruby-talk-request@ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk&gt;

--
Tony Arcieri

Unsubscribe: <mailto:ruby-talk-request@ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk&gt;

Unsubscribe: <mailto:ruby-talk-request@ruby-lang.org?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-talk&gt;

--
Tony Arcieri