4 ms·
Was a good tutorial and pretty easy to work though. But it seems LibreSSL really hasn't taken hold on Linux and so supporting infrastructure isn't in place. B
by tux1968 8y ago
Was a good tutorial and pretty easy to work though. But it seems LibreSSL really hasn't taken hold on Linux and so supporting infrastructure isn't in place. Being able to use this simple API is really enticing, but I'm not sure it's quite worth swimming against the prevailing currents.
As an aside, while searching around I found this recent in depth talk "State of LibreSSL and OpenSSL in FreeBSD":
https://www.youtube.com/watch?v=W0qxHckVA9Y https://www.youtube.com/watch?v=W0qxHckVA9Y
- sigjuice 8y agoWhat is the missing Linux infrastructure? The distributions provide no LibreSSL packages and therefore there are no applications able to use libtls? Or is there more to it?
- tux1968 8y agoYeah, mostly its that there are no packages, and that it doesn't seem likely to change. So any fine tuning for things like making sure keys and certificates are stored & managed per the distribution conventions, protected by selinux et. al, and all the other housekeeping things, are all left up to the application rather than getting the benefits of full distro integration. Edit: Actually since on Linux you still need OpenSSL or a replacement to handle the actual certificates and keys anyway, maybe my concern in that area is misplaced.
- deleted 8y ago[deleted]