4 ms·
OpenSSL is not the only available implementation of SSL.
by raesene9 8y ago
OpenSSL is not the only available implementation of SSL.
- detaro 8y agoRealistically, it's the one that's gonna be used in apt though. (E.g. the existing HTTPS transport uses curl, which uses OpenSSL)
- raesene9 8y agoSure, my point was more that if it's a serious concern to use OpenSSL (Personally I don't think it is, as a lot of work has been done in recent years to improve that codebase), that other options are available.
- jwilk 8y agolibcurl has many TLS backends. APT before 1.6 actually uses the GnuTLS one. APT ≥ 1.6 doesn't use libcurl; it uses GnuTLS directly.
- detaro 8y agoI stand corrected, thx.