| 1 |
Excerpt from Michał Górny and previous post: |
| 2 |
|
| 3 |
> > Further, LibreSSL comes out of the OpenBSD project, which has a good |
| 4 |
> > reputation on code quality. |
| 5 |
|
| 6 |
> I could buy that if it actually said anything about LibreSSL code |
| 7 |
> quality. So far you're guessing that it might or might not, especially |
| 8 |
> given it is forked from an apparently 'inferior quality' code. |
| 9 |
|
| 10 |
> However, I do have serious doubts about LibreSSL quality given that: |
| 11 |
|
| 12 |
> 1. Non-OpenBSD systems are not first class citizens, as you yourself |
| 13 |
> pointed out. |
| 14 |
|
| 15 |
> 2. The library is an intrusive replacement for OpenSSL. In the default |
| 16 |
> setup, it is neither co-installable with OpenSSL, nor a drop-in |
| 17 |
> replacement. |
| 18 |
|
| 19 |
> 3. The upstream declares OpenSSL version constants pretty randomly, |
| 20 |
> without actually matching OpenSSL API. |
| 21 |
|
| 22 |
> 4. The upstream has actively tried to force people into using their |
| 23 |
> product by tight coupling and forced incompatibility. |
| 24 |
|
| 25 |
> 5. Apparently nobody is issuing CVEs for LibreSSL while |
| 26 |
> the vulnerabilities clearly do happen. |
| 27 |
|
| 28 |
My limited experience with OpenBSD does not give credence to their code quality. |
| 29 |
|
| 30 |
Latest experience was from liveusb-openbsd.sourceforge.net. |
| 31 |
|
| 32 |
I was able to download the image and write to 64 GB USB stick. |
| 33 |
|
| 34 |
I managed to get it to boot, but couldn't find my way around. |
| 35 |
|
| 36 |
It couldn't read my GPT-partitioned hard drive, and I was not about to take big risks regarding my data. |
| 37 |
|
| 38 |
OpenBSD fdisk is quite primitive compared to NetBSD (gpt), FreeBSD (gpart), Linux (gdisk: also available for FreeBSD, Windows and macOS). |
| 39 |
|
| 40 |
OpenBSD seems to have dubious compatibility with NetBSD, FreeBSD and Linux software packages, and is not good at peaceful coexistence with NetBSD, FreeBSD, Linux and probably other OSes on the hard drive. |
| 41 |
|
| 42 |
I looked in NetBSD pkgsrc, FreeBSD ports, Gentoo portage, and Void Linux packages, and libressl was there, which is not to say how compatible it is or how much patching is needed. |
| 43 |
|
| 44 |
Tom |
Archives