Ruby OpenSSL Present Future and Why It Matters
summary
Overview of what exists in Ruby 1.9.3 OpenSSL and concrete additions: a DSL called OpenSSL::ASN1::Template that parses/encodes ASN.1, an XML-signature implementation written in C for libxml with plans to integrate with Nokogiri, and a gem-level redesign (project Krypto) that keeps crypto primitives in C but moves most ASN.1 and glue into Ruby. Pure-Ruby ASN.1 was ~10x slower; moving hot paths to C brings it to ~2x slower than native C. Also documents missing features like no online revocation, no path discovery, and proposes digitally signed gems and better cert validation APIs.
AI-written summary · about
chapters (15)
- 0:00Start
- 0:36XML Digital Signatures
- 2:10powerful alternative to CMS-based binary signatures (RFC 5652)
- 7:01ever-recurring chore: parsing & encoding
- 8:56pure Ruby implementation
- 10:35OS X deprecates OpenSSL in Lion
- 10:54OpenSSL no longer available for granted
- 11:34more code in Ruby
- 12:09independence of OpenSSL
- 14:46documentation
- 16:09forbid dangerous configuration
- 17:06integration of secure storage
- 17:18engine integration (PKCS#11, ...)
- 23:19trust management
- 23:42application requirements - typically different than browser requirements
