3 ms·
That depends on your goals. I started testing nginx compiled against LibreSSL from before portable was official[0]. If your goal is security, as far as I'm co
by technion 11y ago
That depends on your goals.
I started testing nginx compiled against LibreSSL from before portable was official[0].
If your goal is security, as far as I'm concerned it's met that goal since day one. If the goal is stability, the slimmer codebase is certainly no less stable than OpenSSL.
There were however, several occasions places where code didn't compile for various reasons. Some were fixed by nginx, and some were fixed with PRs I sent LibreSSL. Key to this is that there were situations where newer releases of LibreSSL broke my build process.
If you were on a project less ubiquitous than nginx, you may find that sort of hacking a waste of time.
If you have the resources to use it, it's posts like this that strongly turn me in the direction of LibreSSL.
[0] https://github.com/technion/libressl_nginx https://github.com/technion/libressl_nginx