Nuke wrote:vishnu wrote:foetz wrote:vishnu wrote: One thing's for sure, the LibreSSL guys didn't think too highly of the state of the OpenSSL code when they forked it.
they should've kept the build system tho. libressl comes with a bunch of crap such as hardcoded, gcc specific cflags and such
Well that's retarded. But apparently not as retarded as the OpenSSL codebase:
http://www.openbsd.org/papers/bsdcan14-libressl/mgp00001.html
Even if only a tiny fraction of what he's saying is accurate, wow wwwww .. .
http://www.openbsd.org/papers/bsdcan14- ... 00011.html
http://www.openbsd.org/papers/bsdcan14- ... 00012.html
Well, I can understand not re-implementing libc?
The drop-in replacement part, though...not supporting everything the original supports, just "what people will probably use"? This sounds tolerable for me given I probably won't ever need any of the things they've removed but I still don't like the idea of intentionally not supporting things and then saying "drop-in replacement".
It is far from a drop in replacement when they only support a couple of platforms. I can build OpenSSL on many platforms that are still alive but not common, say OpenVMS, that I doubt libreSSL will ever support. And then you have things like IRIX and AIX that don't work because the OpenBSD team never implemented arc4random and such, instead saying complain to SGI and IBM that the OS doesn't do things the way the OpenBSD team feels they should be done.
"Apollo was astonished, Dionysus thought me mad."