Re: Update of wip/libressl to 2.1.6

[Iain Morgan <Iain.Morgan%nasa.gov@localhost>]

On Tue, Mar 24, 2015 at 23:39:03 +0100, Kamil Rytarowski wrote:
> Iain Morgan wrote:
> > Hello,
> > 
> > I've included below a patch to update wip/libressl to the current
> > ve4rsion, 2.1.6. I don't have a NetBSD system to test on, but version
> > 2.1.3 claims to have added initial NetBSD support, so the TODO file may
> > no longer be accurate.
> > 
> > Regards,
> 
> Thank you for working on it.
> 
> I would leave the TODO as it is until verified that it's no longer valid.
> I recall a possible security issue in FreeBSD and NetBSD regarding forking.

OK, sounds good.

> 
> FreeBSD puts work on adapting ports for LibreSSL, it happens to be a lot
> of work to do:
> https://wiki.freebsd.org/LibreSSL

True, but frequent OpenSSL vulnerabilities also create work. Hopefully
between the various BSD's we can get enough patches upstreamed to make
this feasible. And, apparently PC-BSD is pushing for LibreSSl as well.

> 
> It involves need for patches in a few programming languages (C, Python, ..).

-- 
Iain Morgan