The state of LibreSSL in FreeBSD • Hacker News Board

Re: The state of LibreSSL in FreeBSD

#21

Post by gbrown_ » Mon, Jul 04, 2016, 10:00 AM UTC

hiphopyo wrote: post #13

It's awesome that cool things from OpenBSD are being ported over to FreeBSD, but why not just use OpenBSD from the get-go? It's already a struggle having to deal with FreeBSD's outdated version of pf. iTWire - Crypto: FreeBSD playing catch-up, says De Raadt: http://www.itwire.com/business-it-news/open-source/62641-cry...

I've got a lot of love for OpenBSD but I can understand people wanting to use FreeBSD for things like ZFS and dtrace. However for those seeking to use said features personally I would recommend looking at an illumos distro.

Re: The state of LibreSSL in FreeBSD

#22

Post by gbrown_ » Mon, Jul 04, 2016, 10:05 AM UTC

ryuuchin wrote: post #11

sverige wrote: post #6

Good news for FreeBSD. I agree that LibreSSL is the best bet for the future.

There also BoringSSL[1] but that might be even more of a departure than LibreSSL in terms of API compatibility. I still think it's surprising that we don't see more BoringSSL being used especially with nginx. [1] https://boringssl.googlesource.com/boringssl/

I would note LibreSSL has taken fixes from BoringSSL.

Re: The state of LibreSSL in FreeBSD

#23

Post by anonbanker » Mon, Jul 04, 2016, 5:09 PM UTC

cm3 wrote: post #20

anonbanker wrote: post #18

Earlier quoted context omitted.

Gentoo ~x86/~amd64 also supports LibreSSL with the "libressl" USE flag. Makes for a great hardened (Grsecurity/PaX) install for servers/chromebooks.

Is there also a Gentoo profile for a system-wide clang/llvm? Add libressl and musl (instead of glibc), and it would be quite a different and advantageous linux distro.

not sure about clang/llvm, but you can definitely build with musl or uClibc rather than glibc.

Gentoo is largely what you make it, while Void is about sane defaults.

Re: The state of LibreSSL in FreeBSD

#24

Post by Teckla » Mon, Jul 04, 2016, 6:58 PM UTC

aphextron wrote: post #19

hiphopyo wrote: post #13

It's awesome that cool things from OpenBSD are being ported over to FreeBSD, but why not just use OpenBSD from the get-go? It's already a struggle having to deal with FreeBSD's outdated version of pf. iTWire - Crypto: FreeBSD playing catch-up, says De Raadt: http://www.itwire.com/business-it-news/open-source/62641-cry...

FreeBSD and OpenBSD are ideologically opposed. FreeBSD is free as in freedom, OpenBSD is free as in beer.

Both FreeBSD and OpenBSD are BSD licensed.

Why do you think FreeBSD is free as in freedom?