From owner-freebsd-current@freebsd.org Wed Dec 13 01:58:49 2017 Return-Path: Delivered-To: freebsd-current@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 32C4DE8D245 for ; Wed, 13 Dec 2017 01:58:49 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-pf0-x235.google.com (mail-pf0-x235.google.com [IPv6:2607:f8b0:400e:c00::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id F0C307D491 for ; Wed, 13 Dec 2017 01:58:48 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: by mail-pf0-x235.google.com with SMTP id l24so653085pfj.6 for ; Tue, 12 Dec 2017 17:58:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hardenedbsd-org.20150623.gappssmtp.com; s=20150623; h=date:from:to:cc:subject:message-id:references:mime-version :content-disposition:in-reply-to:user-agent; bh=wQV8DxuYiBN+jZL5BuW367i2y2JMEHde1Qbh7iRhreM=; b=tvINqpMcCzGxca/gFGvD5t/Eki93QmAZ4lLLajWMiPtuj/axYgt6GN/EQKMAzdmJz0 8LMvVFQsO3gRvO+/gzNgWGwZR3wsusFyEo/Ks9fjXmR1GN79P7f8cV8Dc4t0lQU+uedw 1/5r2rm2A6ZzyKtP8qY6Lask4qE720bD0xPwd2HxEqyc7T+bKcsjkJsF5s4ulDR1vZRd Hqs4Z4HmmFMUgOJZMND2iqal4wYm6BXT6RtPM9Z7E/Aln1qv8MIF4kq0lQ46j3IJvR77 27Z8HLTG2IOMvA1knN6OkoW7Cv81rikKo28O7MFzIg2shx4mXvgNcjz0vkgVWOwQ4B/M 96Og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id:references :mime-version:content-disposition:in-reply-to:user-agent; bh=wQV8DxuYiBN+jZL5BuW367i2y2JMEHde1Qbh7iRhreM=; b=C8Uvwfv6EHtIsI+WsSof0DIXp45+cupMWHMLvbTnxSvHaVMhoIZZ+sPswtR6/M8CMZ OiJHKnpRbS4VIqVQlrGImseJIeJF1Gm0j14xZ3bdk87Za4cgYJNkSOnBMAQFRRocjDal YOO+H7J1uiKc0mv91mmirS1DlhsdpKgi1bWe9EgZ+/CTs0MdznDkR3icH9UaV6qlya/R IQtF+xuLg+lIcafRBFoSK5IAlI+lwE/CDKWK4yl4VQKFoskxcXB3MU4buTiHgBzwLlkD rNrKkr9JJw2oeueb51iOBb6OOVnxC1eXOqx0rrPJFE7bUmvwRLN3wdV7equRBw50SW6Y rPpw== X-Gm-Message-State: AKGB3mLUrSi8QceU1/+WEQCXHc+qR35IEEaDo35ME8QCQ+zjK5nDufeE ItWRNay9eCG/pl/JBTbFaDdPAw77LPE= X-Google-Smtp-Source: ACJfBosJLDBxBk2Rboc4B94HDb0G6Dv9oTmPOEACqy7HQhJmyjESvFjfAHe1mvPbKznN0Yq71Z/mLw== X-Received: by 10.98.20.74 with SMTP id 71mr4322479pfu.77.1513130328338; Tue, 12 Dec 2017 17:58:48 -0800 (PST) Received: from mutt-hbsd (tor01.telenet.unc.edu. [204.85.191.31]) by smtp.gmail.com with ESMTPSA id q74sm551373pfd.134.2017.12.12.17.58.46 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Tue, 12 Dec 2017 17:58:47 -0800 (PST) Date: Tue, 12 Dec 2017 20:58:26 -0500 From: Shawn Webb To: Chris H Cc: FreeBSD Current Subject: Re: Replacing OpenSSL in base -- does it work? Message-ID: <20171213015826.36qor4ecm3kprnu4@mutt-hbsd> References: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="t6z4k7d7gqcgnkkx" Content-Disposition: inline In-Reply-To: X-Operating-System: FreeBSD mutt-hbsd 12.0-CURRENT FreeBSD 12.0-CURRENT X-PGP-Key: http://pgp.mit.edu/pks/lookup?op=vindex&search=0x6A84658F52456EEE User-Agent: NeoMutt/20171027 X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 13 Dec 2017 01:58:49 -0000 --t6z4k7d7gqcgnkkx Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Dec 12, 2017 at 05:57:29PM -0800, Chris H wrote: > Hi all, > I just fired off a fresh build on a new 12-CURRENT install. But forgot > to add WITHOUT_OPENSSL to src.conf(5), as I had intended to. :-( > Anyway, I'd like to remove OpenSSL from base. Any recommendations on the > best approach, and best alternatives? Both HardenedBSD and TrueOS use LibreSSL in base. Thanks, --=20 Shawn Webb Cofounder and Security Engineer HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE --t6z4k7d7gqcgnkkx Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEKrq2ve9q9Ia+iT2eaoRlj1JFbu4FAlowiT8ACgkQaoRlj1JF bu4kxxAAlmOZRO6zI13vMA9cqnnX/NIImCT60SiZ7ZFB3KqDUa3bIwP23xbIwlwO J8FYD4vMIvT1ex9TYrgi1rgjjKTEXPcefkcqAOsLGf/CRLdfMB93200rOYwfPAbI dptyuZ9s0WLPNaYiQcu07dH28WTHiiUKkmvkUeKoQh6f+wquwz04B36PP6/huPW1 F3/JMXuH5zRI2a4nxz/bCbqv1f2B0/XYFlv/PszgmABQJYLL/dSl32UcPu7Jd8Yn VTSpayeCkssiu+XQ3U35EaNFkc4DlL54Aze/cQmtVldWZVf9HkjSr4eR129T5fEB 32G/Sm7MoX1EsGG+SJOgviX9G7x6jlMIS/9T8b3VVuGQkUxstMT0eDC04jboYWSj X3CNkQ2biyuVCSDhfDzsCv6YXQ78tRIahByTqXQq9OAvEV7iHSdrRWpIUOtz7Tdz nxxB0gTNrN2u914If6h0WkG/zm6xPYOtSyhGtWAyhnCAkSha1JikICSK+JIwtG+o 2uliZCZIT0y544sSqRodzvvYCBwOIB+iEYdbTTQWbv8CmRLdV4+tsrspmDWsdkRd u/81+vY631cysAUualYRMJTH+4+Z/pU0To/iC4iHLahVbHhjVhIb2ZcbXx4MtNMO g37k+50AYKiMipSN297/ygv2Yb6KerMLzQl42xQ3Koc/HDV+zds= =93wt -----END PGP SIGNATURE----- --t6z4k7d7gqcgnkkx--