Hacker News Reader

Comment by Rimintil | Hacker News Reader

It has! It's on every iDevice out there.

Apple uses LibreSSL, not OpenSSL.

    @Ytterbium ~ % uname -a

    Darwin Ytterbium.local 22.1.0 Darwin Kernel Version 22.1.0: Sun Oct  9 20:15:52 PDT 2022; root:xnu-8792.41.9~2/RELEASE_ARM64_T8112 arm64

    @Ytterbium ~ % openssl version

    LibreSSL 3.3.6

View on HN

Isn't the builtin openssl lib a basic shim for LibreSSL, mostly only there for backwards compatibility and with limited functionality. IIRC Apple want you to use their Network framework https://developer.apple.com/documentation/network.

https://en.wikipedia.org/wiki/LibreSSL

Adoption is the default for a few BSDs, OpenSSH on Windows, macOS.

From a usage standpoint, you're probably correct (I honestly don't know) -- I only use it to generate web server certificates.

I'm guessing you're on macOS 13? The machine I'm on now is still on 12.6 (`Darwin Kernel Version 21.6.0`), and `openssl version` reports `OpenSSL 3.0.6`. Glad to see it if they made the switch in the new release, though.

Could it be that you have a different openssl in your PATH shadowing the system one? Because I could have sworn macOS 12 also used LibreSSL.

Derp, you're right - it was finding an OpenSSL binary that MacPorts installed. Explicitly doing `/usr/bin/openssl version` shows `LibreSSL 2.8.3`.

Reply on news.ycombinator.com