From owner-freebsd-arch@freebsd.org Mon Oct 30 21:11:37 2017 Return-Path: Delivered-To: freebsd-arch@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 959CAE65895; Mon, 30 Oct 2017 21:11:37 +0000 (UTC) (envelope-from root@mx0.esc7.net) Received: from mx0.esc7.net (mx0.esc7.net [IPv6:2604:c400:0:2:72:53:186:20]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5BCD571B31; Mon, 30 Oct 2017 21:11:37 +0000 (UTC) (envelope-from root@mx0.esc7.net) Received: by mx0.esc7.net (Postfix, from userid 0) id B96E946353D; Mon, 30 Oct 2017 16:05:21 -0500 (CDT) Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=8.8.178.116; helo=mx2.freebsd.org; envelope-from=owner-freebsd-security@freebsd.org; receiver=bwarriner@esc7.net Received: from mx2.freebsd.org (mx2.freebsd.org [8.8.178.116]) by mx0.esc7.net (Postfix) with ESMTPS id 4A309461C37 for ; Sat, 28 Oct 2017 03:03:58 -0500 (CDT) Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx1.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx2.freebsd.org (Postfix) with ESMTPS id A56638C837; Sat, 28 Oct 2017 08:03:51 +0000 (UTC) (envelope-from owner-freebsd-security@freebsd.org) Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org [IPv6:2001:1900:2254:206a::50:5]) by mx1.freebsd.org (Postfix) with ESMTP id 76A48672E8; Sat, 28 Oct 2017 08:03:51 +0000 (UTC) (envelope-from owner-freebsd-security@freebsd.org) Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BAC5EE5E67A; Sat, 28 Oct 2017 08:03:38 +0000 (UTC) (envelope-from phk@phk.freebsd.dk) Received: from phk.freebsd.dk (phk.freebsd.dk [130.225.244.222]) by mx1.freebsd.org (Postfix) with ESMTP id 7977D6723E; Sat, 28 Oct 2017 08:03:38 +0000 (UTC) (envelope-from phk@phk.freebsd.dk) Received: from critter.freebsd.dk (unknown [192.168.55.3]) by phk.freebsd.dk (Postfix) with ESMTP id 9503027374; Sat, 28 Oct 2017 08:03:35 +0000 (UTC) Received: from critter.freebsd.dk (localhost [127.0.0.1]) by critter.freebsd.dk (8.15.2/8.15.2) with ESMTP id v9S83Wap023377; Sat, 28 Oct 2017 08:03:34 GMT (envelope-from phk@phk.freebsd.dk) To: Benjamin Kaduk Subject: Re: Crypto overhaul In-reply-to: <20171028022557.GE96685@kduck.kaduk.org> From: "Poul-Henning Kamp" References: <13959.1509132270@critter.freebsd.dk> <20171028022557.GE96685@kduck.kaduk.org> MIME-Version: 1.0 Content-ID: <23375.1509177812.1@critter.freebsd.dk> Date: Sat, 28 Oct 2017 08:03:32 +0000 Message-ID: <23376.1509177812@critter.freebsd.dk> X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list Cc: Eric McCorkle , "freebsd-security@freebsd.org security" , "freebsd-arch@freebsd.org" , Ben Laurie , "freebsd-hackers@freebsd.org" Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: owner-freebsd-security@freebsd.org Sender: owner-freebsd-security@freebsd.org X-ESC7-MailScanner-Information: Please contact the ISP for more information X-ESC7-MailScanner-ID: B96E946353D.A475F X-ESC7-MailScanner: Found to be clean X-ESC7-MailScanner-SpamCheck: not spam (whitelisted), SpamAssassin (not cached, score=5.001, required 3, autolearn=disabled, FOREIGN_DOMAIN 3.00, HEADER_FROM_DIFFERENT_DOMAINS 0.00, NEW_TLDS 3.50, NEW_TLDS_1 3.50, RCVD_IN_DNSWL_HI -5.00) X-ESC7-MailScanner-From: root@mx0.esc7.net X-Spam-Status: No X-BeenThere: freebsd-arch@freebsd.org List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 30 Oct 2017 21:11:37 -0000 -------- In message <20171028022557.GE96685@kduck.kaduk.org>, Benjamin Kaduk writes: >But I think the main issue with OpenSSL in base that was leading to >thoughts about replacing it is the mismatch between FreeBSD release >branch support lifecycles and OpenSSL release branch support lifecycles. That's not why I want OpenSSL gone from the tree. My reason is that I think OpenSSLs architecture, (to the extent you can talk about OpenSSL having one), APIs and the source code are all horrible. -- Poul-Henning Kamp | UNIX since Zilog Zeus 3.20 phk@FreeBSD.ORG | TCP/IP since RFC 956 FreeBSD committer | BSD since 4.3-tahoe Never attribute to malice what can adequately be explained by incompetence. _______________________________________________ freebsd-security@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"