Sure, let's continue to reward incompetence by further funding openssl.
In a sane world, everybody would have switched to libressl ages ago.
In a sane world, everybody would have switched to libressl ages ago.
Void is considering switching back too: https://github.com/void-linux/void-packages/issues/20935
All of those projects that switched were simply expecting LibreSSL/OpenBSD to upstream support, when it hasn't got nearly the same numbers of developers.
Also, there were other problems with updating Qt on OpenBSD, but that was resolved. It is maintained by a single developer.
https://marc.info/?l=openbsd-ports-cvs&m=158411843726544&w=2
Well Void is far more on edge than OpenBSD -current.
>there were other problems with updating Qt on OpenBSD, but that was resolved
They are still trailing us.
"LibreSSL is composed of four parts:
- The openssl(1) utility, which provides tools for managing keys, certificates, etc. - libcrypto: a library of cryptography fundamentals - libssl: a TLS library, backwards-compatible with OpenSSL - libtls: a new TLS library, designed to make it easier to write foolproof application"
:shrug:
https://www.openbsd.org/papers/bsdcan2019-tls13.pdf (video: https://www.youtube.com/watch?v=MCVIBwGOwNY)
It maintains source compatibility with OpenSSL at an API and command-line level (e.g. openssl(1) utility).
LibreSSL cannot copy code from later versions of OpenSSL as they relicensed it under the Apache 2.0 license.