<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Am 09.01.18 um 18:24 schrieb Perry E.
Metzger:<br>
</div>
<blockquote type="cite"
cite="mid:20180109122422.721b8146@jabberwock.cb.piermont.com">
<pre wrap="">On Mon, 8 Jan 2018 18:47:14 +0100 Jan Stary <a class="moz-txt-link-rfc2396E" href="mailto:hans@stare.cz"><hans@stare.cz></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi Jeremy,
</pre>
<blockquote type="cite">
<pre wrap="">On Sat, Dec 02, 2017 at 06:03:17AM -0800, Jeremy Huddleston
Sequoia wrote:
</pre>
<blockquote type="cite">
<pre wrap="">There are some things that I want to do to the port (and
OpenSSL)
</pre>
</blockquote>
</blockquote>
<pre wrap="">
It would be very nice if all ports currently depending on openssl
would build against libressl, and we could get rid of openssl
in favor of the way-superior libressl (until Apple replaces
it system wide. ha ha ha.)
</pre>
</blockquote>
<pre wrap="">
I'm not sure I agree with the claim that libressl is necessarily
better. </pre>
</blockquote>
i would as well be cautions with the term "superior", at least when
the criteria <br>
are not clear. <br>
<br>
In the past i have provided support for OpenSSL 1.0.* and 1.1.* and
<br>
LibreSSL 2.6.3 and 2.6.4 for non-trivial projects , and from my
experience<br>
this is not a simple drop-in replacement in general. One pain is
that OpenSSL<br>
changed some calls between 1.0 and 1.1, and another one is that <br>
LibreSSL claims to be OpenSSL 2.* (via <code>OPENSSL_VERSION_NUMBER</code>)
<br>
which confuses source code that has to compare for version numbers <br>
for the above reasons.<br>
<br>
The process is doable (see e.g. HardenedBSD [1], OpenBSD 5.6), but <br>
cooperation with upstream projects is probably required for some
packages.<br>
<br>
all the best<br>
-g<br>
<br>
[1]
<a class="moz-txt-link-freetext" href="https://brnrd.eu/libressl/2016-03-06/libressl-in-hardenedbsd-base-part-ii.html">https://brnrd.eu/libressl/2016-03-06/libressl-in-hardenedbsd-base-part-ii.html</a><br>
</body>
</html>