Beefy Boxes and Bandwidth Generously Provided by pair Networks
Problems? Is your data what you think it is?
 
PerlMonks  

SSL modules to include

by tstock (Curate)
on Oct 28, 2004 at 03:52 UTC ( [id://403245]=perlquestion: print w/replies, xml ) Need Help??

tstock has asked for the wisdom of the Perl Monks concerning the following question:

I am working on refactoring a 3 year old module that currently uses Net::Telnet, and because I will need SSL support as well now, I am thinking of using IO::Socket and IO::Socket::SSL or Net::SSLeay.

Since IO::Socket::SSL depends on Net::SSLeay anyway, is it worth the extra dependency for the convenience? Are there other modules I should be looking into ? Should I place the module that provides SSL as a requirement in my Makefile.PL or allow for the user to install it without SSL and die() if a SSL connection is requested and the SSL module is not present ? All questions I would rather have more experienced monks weight in...

Thanks in advance,
Tiago

Replies are listed 'Best First'.
Re: SSL modules to include
by PodMaster (Abbot) on Oct 28, 2004 at 04:49 UTC
    Should I place the module that provides SSL as a requirement in my Makefile.PL or allow for the user to install it without SSL and die() if a SSL connection is requested and the SSL module is not present ?
    Makefile.PL should warn the user if he doesn't have IO::Socket::SSL that it is required for SSL support, and then go on its merry way. The SSL tests should be skipped if IO::Socket::SSL is not present. And yes, if a user tries to make a SSL connection the module should die.

    MJD says "you can't just make shit up and expect the computer to know what you mean, retardo!"
    I run a Win32 PPM repository for perl 5.6.x and 5.8.x -- I take requests (README).
    ** The third rule of perl club is a statement of fact: pod is sexy.

Re: SSL modules to include
by jonadab (Parson) on Oct 28, 2004 at 17:22 UTC

    Archive::Tar will install without IO::Zlib, but it is clearly documented that it can't handle compressed or gzipped tarballs unless you install IO::Zlib. Otherwise you can still do regular, non-compressed tarballs. IMO, this is a good approach.


    "In adjectives, with the addition of inflectional endings, a changeable long vowel (Qamets or Tsere) in an open, propretonic syllable will reduce to Vocal Shewa. This type of change occurs when the open, pretonic syllable of the masculine singular adjective becomes propretonic with the addition of inflectional endings."  — Pratico & Van Pelt, BBHG, p68
Re: SSL modules to include
by elwarren (Priest) on Oct 28, 2004 at 23:19 UTC
    I guess it depends on what you're writing, but I say allow the user to install and use the module without SSL. The LWP module works just fine for http without https support. Strongly advise them of the security and need to use SSL in your docs and even during the install and module complilation, but don't prevent them from using your perfectly good module just because they really should use SSL. There are too many political aspects to encryption code to require it. Maybe they'll just pipe your module over an SSH tunnel or VPN and have encryption.

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: perlquestion [id://403245]
Approved by jfroebe
Front-paged by htoug
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others scrutinizing the Monastery: (1)
As of 2024-04-25 04:35 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found