2 ms·
LibreSSL is the only fork. Only openbsd and Void Linux use it. Void is considering abandoning it due to: * software compatibility. Notably Qt does not support
by CameronNemo 7y ago
LibreSSL is the only fork. Only openbsd and Void Linux use it. Void is considering abandoning it due to:
* software compatibility. Notably Qt does not support LibreSSL and Python hashlib disables a few important crypto algorithms with libressl. Other various packages require some patching, which distro maintainers are uncomfortable doing for unfamiliar and security critical code.
* performance. The portable version of libressl does not generate assembly used to accelerate important crypto algorithms on several CPU architectures such as ppc64el and aarch64.
* slowness to implement tls 1.3. Which is a funny one since tls 1.3 is what caused openssl's most recent vulnerability.
Other notable tls implementations include rustls, gnutls, bearssl, and boringssl.