[rsyslog] openssl vs rsyslog

[Rainer Gerhards]

> > Interesting to know. Do you know any technical advantages 
> of NSS over
> > GnuTLS (stability, features, nicer API, etc)?
> 
> openssl transition library
> fips certification.
> 
> http://www.mozilla.org/projects/security/pki/nss/fips/
> 
> the second one being the most important, I think.
> 
> -sv

FIPS is a strong selling point, I have to admit. Especially as rsyslog
is heading towards the compliance space and trying to be as tamper-proof
as possible. On a quick lock, GNUTLS looks a bit nicer to me (the NSPL
doesn't sound really good whereas the GNUTLS zlib implementations solves
something I intended to do). But FIPS... 

Rainer