Re: … the actual OpenSSL
Re: … the actual OpenSSL
- Subject: Re: … the actual OpenSSL
- From: Uli Kusterer <email@hidden>
- Date: Mon, 12 Jan 2015 04:48:57 +0100
On 12 Jan 2015, at 02:48, Marco S Hyman <email@hidden> wrote:
>> My question is in two parts:
>
> See https://github.com/libressl-portable/portable
>
> "The resulting library and 'openssl' utility is largely API-compatible with
> OpenSSL 1.0.1. However, it is not ABI compatible - you will need to relink your
> programs to LibreSSL in order to use it, just as in moving from OpenSSL 0.9.8
> to 1.0.1."
>
> No comment regarding part (b) of your question.
AIUI the missing ABI compatibility in OpenSSL (and its developers' non-interest in providing a binary-stable interface) are the reason why Apple deprecated OpenSSL and introduced Security.framework. They wanted an encryption API on their platform that would automatically get its security holes plugged for all apps when the OS updates its copy, which apparently OpenSSL didn’t allow.
Cheers,
-- Uli Kusterer
“The Witnesses of TeachText are everywhere...”
http://zathras.de
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden