Re: [PATCH] cleanup the neon socket when closing the ra_session

Mark Phippard wrote:
> On 7/9/07, Stefan Küng <tortoisesvn@gmail.com> wrote:
>> > Really, my best advice is "don't use OpenSSL in threaded application" -
>> > see also neon's GnuTLS support.
>>
>> Well, I can't do that. The users of TortoiseSVN would get really mad if
>> I would stop using OpenSSL. And yes, TortoiseSVN is threaded, in fact
>> all networking is done on a separate thread.
>
> If GnuTLS supports threading better, then why not consider it? I
> doubt you have any need to support SSL v2.0 and GnuTLS seems to
> support the newer protocols much better:
>
> http://www.gnu.org/software/gnutls/comparison.html

Well, sure I could try and use GnuTLS instead of OpenSSL. But the
Windows binaries of Subversion are built with OpenSSL, and that means
the apache module is too. Which means users *can* use SSLv2.0. It would
be a regression if TSVN would suddenly not connect to a https based
repository anymore which it would previously.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org