Re: libressl

[Ludovic Courtès]

Leo Famulari <address@hidden> skribis:

> On Wed, Mar 02, 2016 at 12:03:17PM +0100, Danny Milosavljevic wrote:
>> Hi,
>> 
>> with these openssl security problems lately that don't affect
>> libressl, wouldn't it be better to just use libressl as input
>> everywhere? For the non-removed API, it's compatible, and they merge
>> fixes from openssl anyway - and the attack surface is smaller. (the
>> ABI differs - so it's not advisable to just replace the openssl binary
>> without recompilation of the clients)
>
> If a Scheme wizard can programatically replace all references of openssl
> to libressl in the code base, I would be interested in testing it
> locally.

You can also test with things like this (info "(guix) Package
Transformation Options"):

  guix build --with-input=openssl=libressl something

Ludo’.