On Tue, 12 Apr 2005, Gisle Vanem wrote:

> The latest GnuTls has become too complex for me to build; It depends on
> libgcrypt which again depends on libgpg-error. A GNU Privacy Guard component
> which I haven't installed and built yet.

I agree. It is just about as messy as it can be. At least the libgpg-error
dependency seems downright ugly to me.

> I hope not libcurl will end up with such messy dependencies.

libcurl will always remain functional without any addtional packages. The
additional ones will always remain optional, even if some will be recommended.
Like OpenSSL is today.

> Sure, OpenSSL hash a big footprint, but it's self-contained AFAICS. All in
> all, I don't see the point of using GnuTls at all if it doesn't add any new
> functionality compared to OpenSSL.

Switching to a GnuTLS-based libcurl will most likely be done for
philosophical/license/legal reasons rather than for technical merits, at least
at this point.

The Original BSD-style license of OpenSSL imposes problems to GPL-licensed
programs.

I'm actually not aware of any particular technical differences in SSL/TSL
support etc between the libs, other than that OpenSSL supports SSLv2 which
GnuTLS doesn't.

-- 
  Commercial curl and libcurl Technical Support: http://haxx.se/curl.html