SFML community forums

General => Feature requests => Topic started by: 0x00 on January 28, 2017, 01:32:08 pm

Title: HTTPS, SSL
Post by: 0x00 on January 28, 2017, 01:32:08 pm
Hello community, time to time I think anyone who want work with network data with oauth2 or something else (I mean all what works on HTTPS protocol) faced with not-friendly interfaces. So SFML do you have any plans on this? Because C++ standart have no solutions to work from scratch with network (SSL) (only in C++20 some remarks). Any others solutions like boost or poco is to fat for using)
Title: Re: HTTPS, SSL
Post by: Laurent on January 28, 2017, 03:35:53 pm
HTTPS (and other stuff relying on secured sockets, such as SFTP) is a complex thing, and relies on third-party libraries such as OpenSSL. If someone wants to provide an implementation, why not, but that's not our priority.
Title: Re: HTTPS, SSL
Post by: 0x00 on January 28, 2017, 06:09:39 pm
HTTPS (and other stuff relying on secured sockets, such as SFTP) is a complex thing, and relies on third-party libraries such as OpenSSL. If someone wants to provide an implementation, why not, but that's not our priority.

So if I correctly understood, anyone who want SSL implementation needs to do cross-platform classes and make pull request on github, is it a correct thought?

In latest time more and more sites migrate to HTTPS and some things are not available.
Title: HTTPS, SSL
Post by: eXpl0it3r on January 28, 2017, 07:01:27 pm
The first step would be to discuss the planned changes, especially the choice of TLS third-party library, here on the forum. :)
Title: Re: HTTPS, SSL
Post by: Rosme on January 31, 2017, 03:39:18 pm
Depending on how to approach this, Windows and Apple has their own implementation that SFML could possibly use, leaving Linux to use something else like OpenSSL or BoringSSL. Or we could wrap around the same library for all platforms.
Title: Re: HTTPS, SSL
Post by: korczurekk on January 31, 2017, 04:58:36 pm
I'd wrap one library (preferably OpenSSL) on any OS, it would minimize platform-dependent code and be way shorter.
Title: Re: HTTPS, SSL
Post by: Tank on February 02, 2017, 04:31:35 pm
Wrapping one library isn't a good idea when it comes to security patches — Heartbleed anyone? If the underlying operating system provides own SSL APIs, I'd definitely suggest using those.