Alpine Edge has switched to libressl

Re:Alpine Edge has switched to libressl by marios on Wednesday October 12, 2016 @07:53AM (#12692031)

I recently built LibreSSL to replace OpenSSL on my laptop that runs ArchLinux. After installing, pretty much every thing works seamlessly so far. I rebuilt python because apparently the ssl module looks for RAND_egd (or something of the vein that LibreSSL has removed - and I didn't compile it with a shim). Other than that, dig is broken on my system ("ENGINE_by_id failed") although I have not bothered to fix it since drill works fine.

It's nice to see LibreSSL being picked up by Linux distributions. I wish other major distros did this (I'm looking at you Debian). IIRC, Alpine was often used to built docker images. If that's still the case, I'd say it's good news.

[ Parent | on HN ]

Re:Alpine Edge has switched to libressl by secure on Wednesday October 12, 2016 @08:42AM (#12692269)

> I'm looking at you Debian

You can read up on the packaging efforts at https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754513 — there hasn’t been any activity in a while, so if you have something to add, please post there (but please refrain from +1/me too posts).

[ Parent | on HN ]

Re:Alpine Edge has switched to libressl by voltagex_ on Wednesday October 12, 2016 @10:40AM (#12693256)

What's the general etiquette regarding "bumping" Debian bugs?

[ Parent | on HN ]

Re:Alpine Edge has switched to libressl by edwintorok on Wednesday October 12, 2016 @05:10PM (#12696436)

There is a LibreSSL overlay in Gentoo, which patches various software that would otherwise fail to build with LibreSSL, currently they are these packages:

   dev-qt/qtcore
   dev-qt/qtnetwork
   net-misc/socat

It used to be a bit painful to setup, but things have improved, now I only need this in make.conf:

  USE="... libressl"
  CURL_SSL="libressl"

And this to mask it: /etc/portage/package.mask/openssl

  dev-libs/openssl

There is still some software that would fail to install (with a conflict between openssl and libressl), but none that I need currently.

[ Parent | on HN ]

Re:Alpine Edge has switched to libressl by microcolonel on Wednesday October 12, 2016 @08:27AM (#12692184)

Worried about OpenSSL, but fine with running drill? ;- ) drill segfaults for me on a regular basis.

[ Parent | on HN ]

Re:Alpine Edge has switched to libressl by marios on Wednesday October 12, 2016 @08:41AM (#12692268)

To be fair, I'm not a heavy user of either dig or drill. I use it mostly to check that my local resolver (unbound) is still responding, and that the DHCP distributed resolver isn't handing out garbage.

My usage probably falls into the well tested part of the code I guess.

[ Parent | on HN ]

Re:Alpine Edge has switched to libressl by guitarbill on Wednesday October 12, 2016 @08:12AM (#12692108)

It does seem like a very practical solution. Hopefully we'll see this in the bigger distros once the smaller distros prove it's doable.

[ Parent | on HN ]