WolfSSL is an SSL library targeted at embedded development that focuses on size and speed. It's also FIPS certified which is is important for anyone working with federal agencies.

WolfSSL website: https://www.wolfssl.com/
WolfSSL github: https://github.com/wolfSSL/wolfssl

I have two ideas currently on how Python could support WolfSSL:

1.) Shim WolfSSL's OpenSSL compatibility layer in. They don't provide a complete shim for OpenSSL and I'm not sure if they provide all the symbols Python would care about.
2.) Provide an optional configuration to use WolfSSL and it's API instead of OpenSSL.

Would either options be something the Python maintainers would be interested in? I'm testing the waters to see if this is something anyone is interested in.

Thank you for the time!

My guess is we won't want to take code specific to WolfSSL due to maintenance overhead of trying to support another SSL library. There has been talk about trying to move away from our OpenSSL dependency and switch to using the OS's native secure sockets library which may make this easier to handle for third-parties.

But I'm personally going to leave it up to Christian to comment in case I got something wrong.

Brett is correct.

We don't have the capacity to develop, maintain, and test with another TLS library. I'm basically the only person that maintains the ssl module at the moment.

I might be inclined to accept patches that improves compatibility with WolfSSL's OpenSSL compatibility layer -- if and only if the patches are minimal and don't make the code harder to read or maintain.

Thank you for the replied. I understand completely and I don't think it would be simple patches to try and use the compatibility layer. I have discovered that the WolfSSL compatibility layer doesn't support the full OpenSSL API.

However, I have found that I can build Python without OpenSSL and then use the Python API that WolfSSL provides and that gets us 90% of the way there. I have decided to pursue that instead of trying to add WolfSSL support directly into Python.

I'm going to close this issue for now.