Re: libressl

[Nils Gillmann]

Is it that easy though? I would be surprised, as the process -
maybe, most likely, also due to the incredible weird structures
of portage policies and politics - to move the packages in Gentoo
portage from openssl to handle openssl AND libressl as a one or
the other selection option, turns out to take some time now and
some packages (in gentoo) do depend on it in a way that they need
to be patched to fully work or they have security concerns, for
example in the case of tor (or was it bitcoin? or both?).

Tracking libressl on OpenBSD, Gentoo, and other bugtracker
platforms should be something necessary to do and check before
somebody goes ahead and fully replaces openssl with libressl
here.

I would be really glad to have a system with libressl, that's
something I wanted for gentoo for some time now and I am still
waiting for the whole meta KDE Plasma-5.5.5 and some other
applications (I think 4 months ago it was ~30 I needed to wait
for) to get libressl support. Could be changed now, as the
general acceptance and the speed to get libressl into Gentoo
portage packages picked up since, so maybe my warning is just
based on me trying too much on Gentoo when it was still a side
testing project, where it is now an official project.


-- 
ng
irc://loupsycedyglgamf.onion:67/~NiAsterisk
https://psyced.org:34443/NiAsterisk/
EDN: https://wiki.c3d2.de/Echt_Dezentrales_Netz/en