10 ms·
I think there are FreeBSD people working on getting it into base. I know people have replaced the base OpenSSL with LibreSSL on their own. Edit: This is not th
by gbrown_ 9y ago
I think there are FreeBSD people working on getting it into base. I know people have replaced the base OpenSSL with LibreSSL on their own.
Edit: This is not the case as feld has pointed out below.
- feld 9y agoNot currently in the plans because the support window for LibreSSL is significantly shorter than a FreeBSD release support cycle.
- gbrown_ 9y agoThanks for the correction, I've edited my comment.
- floatboth 9y agoHardenedBSD wanted to do LibreSSL in base but /usr/bin/openssl version on my home server still returns "OpenSSL 1.0.2k-freebsd". I use LibreSSL from ports anyway :) but it'd be nice to have it in base, yeah. By the way I actually do use client certificates on my home server. It's behind my ISP's NAT though, no incoming connections from outside are possible lol
- jlg23 9y agoYes, you have to roll your own. But for hardened setups one has build hosts anyway, so it's just a single config setting to rule them all.