Skip to content
glaucus

libressl

  • Replaces openssl
    • simple; no hard dependency on perl
    • clean
    • somewhat slower; some assembly removed
    • Not FIPS

Prepare

Section titled “Prepare”
  • The release tarballs are already portable
  • No need to patch cnf or prefix with libressl- if used as the default TLS library

Configure

Section titled “Configure”
  • asm acceleration are enabled by default for x86-64
  • --enable-libtls-only only installs libtls for systems that use openssl

Package

Section titled “Package”
  • Provides /etc/ssl/cert.pem by default; no need for ca-certificates
  • Provides nc; short for netcat (prefer openbsd netcat to gnu netcat)

Old

Section titled “Old”
  • wget2 does not work with iproute2 if --with-openssl is used, only --with-ssl=libressl works

References

Section titled “References”