[Cryptography Team] Fwd: [squeak-dev] SSLSocket and basic http auth (api.del.icio.us or mail.google.com or ...)

[UZONYI Levente]

Hi!

Since the Cryptography Team doesn't exists anymore, the Cryptography 
package is not maintained by anyone. The SSL implementation doesn't allow 
easy debugging, you can't just turn on logging to see what's happening. 
Following the state machine transitions should give you the answer why the 
handshake isn't succeding. It might be related to certificates or 
TLS->SSL3 fallback. If I were you, I would go with curl.
There are two ways to use curl for your stuff:
1. Modify CurlPlugin. Since the current version of CurlPlugin doesn't give 
you access to the http headers, you have to add this feature to the plugin 
and the api code.
2. The easier way is to use OSProcess and call the curl command 
line utility directly. With the -H command line switch you can add or 
modify http headers. This should work with linux and mac.

Cheers,
Levente

On Sun, 22 Feb 2009, Simon Kirk wrote:

> Hi all.
>
> This list has been quiet for ages, but I hope that we can get some kind of 
> response here as there's been nothing on Squeak-Dev.
>
> Please see the forwarded message below. It's part of a two-message thread, 
> there are two parties (my company, and pierre-edouard.portier at insa-lyon.fr) 
> trying to use SSLSocket, and having no joy.
>
> Please can anybody help? I'm trying to use CurlPlugin as a workaround, but 
> this is for XML-RPC calls, which needs POST requests with a customer 
> content-type. The upshot is that CurlPlugin is unsuitable.
>
> Ultimately, I'm thinking that if SSLSocket doesn't work, I'm going to have to 
> look to Gemstone or something, and that's a totally foreign environment to 
> me!
>
> Cheers,
> Simon
>