4 ms·
Nixpkgs supports LibreSSL, it can be used alongside OpenSSL due to the way Nix works, and it is usually a single-line change to compile an application against L
by ruuda 6y ago
Nixpkgs supports LibreSSL, it can be used alongside OpenSSL due to the way Nix works, and it is usually a single-line change to compile an application against LibreSSL instead of OpenSSL.
- chalst 6y agoI thought of Nix when I read "it is not possible to install both OpenSSL and LibreSSL on the same system" - a call out in the article at this point would have been. Being able to switch much of your infrastructure to an infrastructure implementation even if it is not possible to switch everything to it is quite a valuable piece of flexibility.
- kazinator 6y ago... and if it links, it must work, so ship it! Put it on an media streamer box or router and sell it to customers.
- takeda 6y agoTypically that's how it works. If some functionality was removed, you will get linking errors.
- Foxboron 6y agoI think this ignores the reality of the libressl support in nixpkgs? I did a quick search and a few packages seems to depend on libressl, there are patches going into one or two python modules, qt4 and I see some patches are fetched from Void Linux. So my naive guess is that the nixos support for libressl depends on the efforts from Void Linux and possibly Gentoo. (I assume some self-written patches as well)
- RunningDroid 6y ago> …and I see some patches are fetched from Void Linux. The Void Linux developers have been discussing switching back to OpenSSL: https://github.com/void-linux/void-packages/issues/20935 https://github.com/void-linux/void-packages/issues/20935