Live data from Hacker News

The sorry state of OpenSSL usability

jameshfisher.com

11–20 of 45 posts

Re: The sorry state of OpenSSL usability

#12

Unfortunately, http://www.libressl.org/ won’t help you either, because there literally isn’t any documentation of LibreSSL. Going to that website and clicking on openssl reveals a manual page. So, I guess the "literally isn’t any documentation" is wrong. OpenBSD likes their man pages.

Not to mention summary pages to each of the three libraries provided by libressl. On each of those there are then links to man pages for each function offered by the libraries.

Not sure what he's missing, I've always found OpenBSD's documentation to be first class.

Re: The sorry state of OpenSSL usability

#14

It's funny to me when people complain about something they get for free. There are at least two solutions to this problem and neither of them are writing a blog to complain about the work that someone else has done and given a way for free. You could write some documentation and give it to them. Or you could pay someone to write it for the project. The author seems to know quite a bit about OpenSSL/LibreSSL. I'd thin…

But there is documentation for LibreSSL. As an OpenBSD project they take documentation just as seriously as code. I just don't get how the article makes that claim when there are links to any man page you need here: http://www.libressl.org/

Re: The sorry state of OpenSSL usability

#15

It's funny to me when people complain about something they get for free. There are at least two solutions to this problem and neither of them are writing a blog to complain about the work that someone else has done and given a way for free. You could write some documentation and give it to them. Or you could pay someone to write it for the project. The author seems to know quite a bit about OpenSSL/LibreSSL. I'd thin…

He could, but you seem to be expecting him to do this work for free. The article he’s written is useful, informative and free, so you seem to have a catch-22 when you criticise him for not going further.

Re: The sorry state of OpenSSL usability

#16
post #5

If your OS is "shit", don't blame others for this. "man openssl" perfectly works on correct OS and you can ask "--help" for all commands.

While I wouldn't call macOS "shit" you're not wrong. On a Slackware 14.2 box and an OpenBSD 6.2 box I just tried both man openssl and openssl --help work fine.

edit: Actually --help does start by saying --help is an invalid command but that's easy to miss because you then get a standard usage command with a basic summary to get you started.

Re: The sorry state of OpenSSL usability

#17
post #9

This is a macOS problem. OpenSSL on Linux has extensive man pages and a --help switch.

On Linux Mint 18:

> (bso) larrik@local:~/bso$ openssl --help > openssl:Error: '--help' is an invalid command.

It lists a bunch of valid commands, though. Of course, you can't do `openssl help genrsa` or anything sensible like that.

Re: The sorry state of OpenSSL usability

#18

Unfortunately, http://www.libressl.org/ won’t help you either, because there literally isn’t any documentation of LibreSSL. Going to that website and clicking on openssl reveals a manual page. So, I guess the "literally isn’t any documentation" is wrong. OpenBSD likes their man pages.

Clicking on OpenSSL takes you to OpenSSL wiki, and he talks about the wiki vs. man pages at the very beginning of his article.

Other links take you elsewhere. Like OpenBSD man pages for libs. He didn’t need a lib.

Yes, the LibreSSL pages contains in total 0 man/docs/wiki pages. Instead it points to external websites.

Re: The sorry state of OpenSSL usability

#20

It's funny to me when people complain about something they get for free. There are at least two solutions to this problem and neither of them are writing a blog to complain about the work that someone else has done and given a way for free. You could write some documentation and give it to them. Or you could pay someone to write it for the project. The author seems to know quite a bit about OpenSSL/LibreSSL. I'd thin…

But there is documentation for LibreSSL. As an OpenBSD project they take documentation just as seriously as code. I just don't get how the article makes that claim when there are links to any man page you need here: http://www.libressl.org/

There are links to the documentation, but they're not labeled as such. They're labeled as though they're links to download the components.
Post reply on HN