Precedence: list
MIME-Version: 1.0
In-Reply-To: <em14874651-5834-4fed-88b8-05281e31e369@elzian>
References: <CA+T2pCGFeh30aEi43hAvJ3yoHBijABy_U62wfjhVmf3FmbNUUg@mail.gmail.com>
 <em14874651-5834-4fed-88b8-05281e31e369@elzian>
From: Chris Spillane <chris.spillane@gmail.com>
Date: Thu, 8 Feb 2018 18:04:06 +0000
Message-ID: <CAKv362uijyQQj5m+mJT1pme36_Dy+r+qFB5dRN_bD0=FUvc6Eg@mail.gmail.com>
Subject: Re: [alpine-devel] Proposed change: openssl 1.1 as default system
 openssl implementation
To: Laurent Bercot <ska-devel@skarnet.org>
Cc: Alpine-devel <alpine-devel@lists.alpinelinux.org>
Content-Type: multipart/alternative; boundary="001a114432c2f68a280564b73cf2"

--001a114432c2f68a280564b73cf2
Content-Type: text/plain; charset="UTF-8"

I concur

On 8 Feb 2018 5:53 pm, "Laurent Bercot" <ska-devel@skarnet.org> wrote:

> But openssl 1.1 has a different situation: Akamai and the Core
>> Infrastructure Initiative have come together to sponsor development
>> and maintenance of openssl since we switched, which means that there's
>> higher quality maintenance occuring now.  They are also working on a
>> relicensing process, much like the libressl guys are doing, which has
>> a larger scope[1].  Meanwhile, the libressl guys have been removing
>> functionality we depend on, such as support for hardware accelerators
>> (ENGINE apis), switching from 64-bit TAIN date calculations to time_t
>> (because time_t is good enough on OpenBSD) and dropping openssl 1.0.1
>> APIs they see as unsuitable.
>>
>> libressl promised to retain compatibility with 1.0.1g APIs, but has
>> failed to do so.
>>
>
>  These arguments sound reasonable, so despite having lobbied for the
> switch to libressl at the time, I have no objection to switching back
> to openssl now.
>
> --
>  Laurent
>
>
>
> ---
> Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
> Help:         alpine-devel+help@lists.alpinelinux.org
> ---
>
>

--001a114432c2f68a280564b73cf2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">I concur</div><div class=3D"gmail_extra"><br><div class=
=3D"gmail_quote">On 8 Feb 2018 5:53 pm, &quot;Laurent Bercot&quot; &lt;<a h=
ref=3D"mailto:ska-devel@skarnet.org">ska-devel@skarnet.org</a>&gt; wrote:<b=
r type=3D"attribution"><blockquote class=3D"gmail_quote" style=3D"margin:0 =
0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><blockquote class=3D"=
gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-=
left:1ex">
But openssl 1.1 has a different situation: Akamai and the Core<br>
Infrastructure Initiative have come together to sponsor development<br>
and maintenance of openssl since we switched, which means that there&#39;s<=
br>
higher quality maintenance occuring now.=C2=A0 They are also working on a<b=
r>
relicensing process, much like the libressl guys are doing, which has<br>
a larger scope[1].=C2=A0 Meanwhile, the libressl guys have been removing<br=
>
functionality we depend on, such as support for hardware accelerators<br>
(ENGINE apis), switching from 64-bit TAIN date calculations to time_t<br>
(because time_t is good enough on OpenBSD) and dropping openssl 1.0.1<br>
APIs they see as unsuitable.<br>
<br>
libressl promised to retain compatibility with 1.0.1g APIs, but has<br>
failed to do so.<br>
</blockquote>
<br>
=C2=A0These arguments sound reasonable, so despite having lobbied for the<b=
r>
switch to libressl at the time, I have no objection to switching back<br>
to openssl now.<br>
<br>
--<br>
=C2=A0Laurent<br>
<br>
<br>
<br>
---<br>
Unsubscribe:=C2=A0 <a href=3D"mailto:alpine-devel%2Bunsubscribe@lists.alpin=
elinux.org" target=3D"_blank">alpine-devel+unsubscribe@lists<wbr>.alpinelin=
ux.org</a><br>
Help:=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0<a href=3D"mailto:alpine-devel%2Bhel=
p@lists.alpinelinux.org" target=3D"_blank">alpine-devel+help@lists.alpin<wb=
r>elinux.org</a><br>
---<br>
<br>
</blockquote></div></div>

--001a114432c2f68a280564b73cf2--


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---