Re: [exim-dev] DANE library for Exim + OpenSSL and upcoming …

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Viktor Dukhovni
Date:  
À: exim-dev
Sujet: Re: [exim-dev] DANE library for Exim + OpenSSL and upcoming OpenSSL 3.0.0 release.
On 12 Aug 2021, at 5:05 pm, Jeremy Harris via Exim-dev <exim-dev@???> wrote:

> > Perhaps you mean OpenBSD, FreeBSD 12 dropped LibreSSL and went back to
> > OpenSSL.
>
> Nope. There's a buildfarm animal listed as "FreeBSD latest"
> showing as building with LibreSSL 3.3.3


Well, sure, LibreSSL is available in ports, but the base system has
returned to OpenSSL:

$ uname -sr
FreeBSD 12.2-RELEASE-p3

$ /usr/bin/openssl version -a
OpenSSL 1.1.1h-freebsd 22 Sep 2020
built on: reproducible build, date unspecified
platform: FreeBSD-amd64
options: bn(64,64) rc4(16x,int) des(int) idea(int) blowfish(ptr)
compiler: clang
OPENSSLDIR: "/etc/ssl"
ENGINESDIR: "/usr/lib/engines"
Seeding source: os-specific

There is also an OpenSSL in ports:

    $ pkg info openssl| head
    openssl-1.1.1k,1
    Name           : openssl
    Version        : 1.1.1k,1
    Installed on   : Fri Mar 26 11:54:30 2021 EDT
    Origin         : security/openssl
    Architecture   : FreeBSD:12:amd64
    Prefix         : /usr/local
    Categories     : security devel
    Licenses       : OpenSSL
    Maintainer     : brnrd@???


If some user is building with LibreSSL, that's their choice, but the
Exim project is surely not obligated to indulge them forever if
maintaining three TLS backends is too much effort.

There's nothing compelling about Exim + LibreSSL vs. Exim + OpenSSL
at this point in time.

-- 
    Viktor.