4 ms·
LibreSSL is yet very experimental and OpenBSD-focused. Which is not wrong, but I wouldn't say it's right now well-baked for inclusion in major Linux distributi
by maximumoverload 12y ago
LibreSSL is yet very experimental and OpenBSD-focused.
Which is not wrong, but I wouldn't say it's right now well-baked for inclusion in major Linux distributions.
- anaphor 12y agoYou're vastly overstating the difficulty in porting LibreSSL. It's 99% POSIX standard use of APIs and modern portable C except for a few security related functions they use that are non-standard such as explicit_bzero, reallocarray, and strlcpy.
- Nakatomi_Plaza 12y agoIndeed https://marc.info/?l=openbsd-tech&m=140332790726752&w=2 https://marc.info/?l=openbsd-tech&m=140332790726752&w=2 there are portable versions of strlcpy, explicit_bzero ect.
- pdw 12y agoNot everything is as easy to port as strlcpy... Implementing a correct arc4random on Linux is quite non-trivial
- yellowapple 12y agoIt's also a couple of months old. Give it a year's time (or half that, even) and that possibility of a proper non-OpenBSD *nix port will be that much more likely.