X-Original-To: alpine-devel@lists.alpinelinux.org Received: from mx1.tetrasec.net (mx1.tetrasec.net [74.117.190.25]) by lists.alpinelinux.org (Postfix) with ESMTP id BC7805C648D for ; Fri, 12 Oct 2018 06:20:19 +0000 (GMT) Received: from mx1.tetrasec.net (mail.local [127.0.0.1]) by mx1.tetrasec.net (Postfix) with ESMTP id 778EC9E1B98; Fri, 12 Oct 2018 06:20:19 +0000 (GMT) Received: from yavin4.bsod.eu (unknown [172.21.190.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: francesco@bsod.eu) by mx1.tetrasec.net (Postfix) with ESMTPSA id 489CC9E00F8; Fri, 12 Oct 2018 06:20:19 +0000 (GMT) X-Mailinglist: alpine-devel Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Date: Fri, 12 Oct 2018 06:20:19 +0000 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: RainLoop/1.12.1 From: "Francesco Colista" Message-ID: Subject: Re: [alpine-devel] Switching back to OpenSSL To: "Natanael Copa" , "Alpine Development" In-Reply-To: <20181011171746.4c01f758@ncopa-desktop.copa.dup.pw> References: <20181011171746.4c01f758@ncopa-desktop.copa.dup.pw> October 11, 2018 3:17 PM, "Natanael Copa" wrote:= =0A=0A> Hi,=0A> =0A> Are there any good reasons to not switch back to Ope= nSSL for v3.9?=0A> =0A> Some reasons why I think we should switch back to= OpenSSL:=0A> - better upstream support from projects=0A> - To my underst= anding, various of the issues in OpenSSL that made us=0A> switch to libre= ssl have been resolved. (for example memory management)=0A> - libressl fa= iled to retain compability with OpenSSL=0A> - libressl breaks ABI every 6= months, OpenSSL does not=0A> - FIPS support=0A> =0A> Some reasons to why= we may continue with libressl may be:=0A> - its smaller=0A> - has fewer = CVEs (due to their approach to remove stuff)=0A> - libtls=0A=0A+1 to swit= ch back to openssl.=0AReasons to come back are totally valid (an more) co= mpared with the pros in having libressl.=0AThanks.=0A=0A.: Francesco Coli= sta --- Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org Help: alpine-devel+help@lists.alpinelinux.org ---