bin/53864: netcat could use OpenSSL

[rlntlss83%gmail.com@localhost]

>Number:         53864
>Category:       bin
>Synopsis:       netcat could use OpenSSL
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jan 13 06:25:00 +0000 2019
>Originator:     rlntlss
>Release:        8.0
>Organization:
independent
>Environment:
8.0 amd64
>Description:
netcat compiles with -ltls (currently commented out), which is not in base, but openssl is.  It looks pretty trivial to support SSL via OpenSSL in netcat.

What I don't know is if netcat is being tracked as a part of OpenSSH.  If that's the case, it might be better to leave it as is..
>How-To-Repeat:

>Fix:
the crypto is currently #ifdef'd out.  One could leave the tls stuff in, but #else if defined CRYPTO_OPENSSL to add the OpenSSL stuff -- that way no one would lose the libtls stuff if they are currently using it.