From: John Helmert III <jchelmert3@posteo.net>
To: gentoo-dev@lists.gentoo.org
Subject: Re: [gentoo-dev] [RFC] Discontinuing LibreSSL support?
Date: Tue, 29 Dec 2020 13:02:02 -0600 [thread overview]
Message-ID: <X+t9KjXTDfsN9M35@sol> (raw)
In-Reply-To: <X+s1uAT394EkNiTL@host>
[-- Attachment #1: Type: text/plain, Size: 1897 bytes --]
On Tue, Dec 29, 2020 at 02:57:12PM +0100, m1027 wrote:
> > > On 29 Dec 2020, at 09:13, Marcel Schilling
> > > <marcel.schilling@mdc-berlin.de> wrote:
> > >
> > > I just want to comment that I switched to LibreSSL on several
> > > Gentoo systems years ago and never had any major issues. I run
> > > both desktop and server systems with LibreSSL, based on X and
> > > Wayland. The only issues I ran into is a slight lag of the
> > > overlay behind the main tree so once in a while I had to mask a
> > > new version of some package for a week or so.
>
> Let me just come back on the different views here:
>
> @marcel: Exactly the same here. Smoothly running libressl on dozens
> of systems here, from embedded to ryzen servers, even on Gnome
> desktops. At least from the libressl *user's* perspective.
>
> sam:
>
> > TL;DR: [...libressl patches are...] just crippling functionality.
>
> @sam: From the perspective of libressl maintainers I have had a hard
> time reading this thread ;-) to learn that even security is supposed
> to be an issue with libressl today!? Aren't these crippling patches
> sometimes even helpful (see some apache patches) to crop unreliable
> extra features? I might be wrong here. Actually I'd prefer something
> 'boring' and stable on ssl over new features...
>
> Well, I cannot judge on the security issues in depth. From a short
> internet scan I don't see recent libressl issues but e.g. this one
> on openssl, https://www.openssl.org/news/vulnerabilities.html, only
> three weeks ago.
That particular vulnerability (CVE-2020-1971) affects both libressl and openssl, and
Gentoo has bugs for both.
https://bugs.gentoo.org/759079
https://bugs.gentoo.org/759175
The openssl bug has been fixed, but the libressl bug remains open,
despite both being opened within two days of each (and now existing
for several weeks).
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]
next prev parent reply other threads:[~2020-12-29 19:02 UTC|newest]
Thread overview: 77+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-12-28 8:56 [gentoo-dev] [RFC] Discontinuing LibreSSL support? Michał Górny
2020-12-28 9:01 ` [gentoo-dev] " David Seifert
2020-12-28 9:12 ` [gentoo-dev] " Agostino Sarubbo
2020-12-28 10:02 ` Hanno Böck
2020-12-29 9:36 ` Sam James
2020-12-28 18:59 ` Anthony G. Basile
2020-12-28 19:55 ` Michał Górny
2020-12-28 20:42 ` Toralf Förster
2020-12-29 12:25 ` Michał Górny
2020-12-29 5:33 ` David Haller
2020-12-29 12:27 ` Michał Górny
2020-12-29 13:03 ` Peter Stuge
2020-12-28 22:00 ` Peter Stuge
2020-12-28 22:26 ` m1027
2020-12-29 12:24 ` Michał Górny
2020-12-29 19:32 ` Paul B. Henson
2020-12-28 22:33 ` Michał Górny
2020-12-28 23:18 ` Peter Stuge
2020-12-29 9:39 ` Michał Górny
2020-12-29 11:07 ` Aaron Bauman
2020-12-29 11:29 ` Peter Stuge
2020-12-29 12:23 ` Michał Górny
2020-12-29 12:41 ` Toralf Förster
2020-12-29 13:02 ` Michał Górny
2020-12-29 12:45 ` Peter Stuge
2020-12-29 12:39 ` Jaco Kroon
2020-12-29 13:08 ` Michał Górny
2020-12-29 13:21 ` Peter Stuge
2020-12-29 13:33 ` David Seifert
2020-12-29 13:42 ` Alexey Sokolov
2020-12-29 13:51 ` Peter Stuge
2020-12-29 15:02 ` Andreas K. Huettel
2020-12-29 19:46 ` Peter Stuge
2020-12-29 20:34 ` Matt Turner
2020-12-29 22:31 ` Peter Stuge
2020-12-30 12:48 ` Andreas K. Huettel
2020-12-29 9:13 ` Marcel Schilling
2020-12-29 9:23 ` Sam James
2020-12-29 13:57 ` m1027
2020-12-29 14:12 ` Michał Górny
2020-12-29 15:12 ` Toralf Förster
2020-12-29 18:10 ` m1027
2020-12-29 18:18 ` Toralf Förster
2020-12-29 18:15 ` Michał Górny
2020-12-29 18:21 ` Toralf Förster
2020-12-30 10:41 ` m1027
2020-12-30 11:08 ` Michał Górny
2020-12-29 19:02 ` John Helmert III [this message]
2020-12-29 11:36 ` Andrey Utkin
2020-12-29 19:49 ` Hanno Böck
2020-12-29 12:06 ` Mikle Kolyada
2020-12-29 14:02 ` Andreas K. Huettel
2020-12-29 22:00 ` Stefan Strogin
2020-12-29 22:31 ` Michał Górny
2020-12-29 22:41 ` Peter Stuge
2020-12-29 23:06 ` David Seifert
2020-12-29 23:34 ` Peter Stuge
2020-12-31 10:11 ` Thomas Mueller
2020-12-31 23:25 ` Patrick McLean
2020-12-30 14:57 ` Anthony G. Basile
2020-12-30 0:00 ` Michał Górny
2020-12-30 0:12 ` Peter Stuge
2020-12-30 14:48 ` Anthony G. Basile
2020-12-30 8:08 ` Marcel Schilling
2020-12-30 8:55 ` Michał Górny
2020-12-30 12:33 ` [gentoo-dev] [RFC] Recap: " Michał Górny
2020-12-30 15:02 ` Peter Stuge
2020-12-30 17:17 ` Michał Górny
2020-12-31 2:50 ` Peter Stuge
2020-12-31 3:15 ` Mike Gilbert
2020-12-31 11:46 ` Peter Stuge
2020-12-31 12:45 ` Jaco Kroon
2020-12-31 16:53 ` Peter Stuge
2020-12-31 20:49 ` Alessandro Barbieri
2020-12-31 21:21 ` [gentoo-dev] Static libraries Peter Stuge
2020-12-31 8:34 ` [gentoo-dev] [RFC] Recap: Discontinuing LibreSSL support? David Seifert
2020-12-31 9:05 ` Michał Górny
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=X+t9KjXTDfsN9M35@sol \
--to=jchelmert3@posteo.net \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox