Switch to BoringSSL? #16

Closed
opened 2015-05-24 09:55:53 +02:00 by alanorth · 1 comment
alanorth commented 2015-05-24 09:55:53 +02:00 (Migrated from github.com)

BoringSSL is Google's fork of OpenSSL 1.0.2 which cleans up some code and adds new cipher suites like ECDHE-RSA-CHACHA20-POLY1305. There are no binary builds for BoringSSL and nginx also has to be built specifically to support this...

A few guides:

BoringSSL is Google's fork of OpenSSL 1.0.2 which cleans up some code and adds new cipher suites like `ECDHE-RSA-CHACHA20-POLY1305`. There are no binary builds for BoringSSL and nginx also has to be built specifically to support this... A few guides: - https://gist.githubusercontent.com/wmark/d208d82c6424810f1b7c/raw/43e7b9115de9af44043524937387ceb055ea451e/install.sh - https://calomel.org/nginx.html
alanorth commented 2016-04-02 19:19:42 +02:00 (Migrated from github.com)

From a blog post about BoringSSL, Adam Langley says you probably don't want BoringSSL:

I am not saying that people should be ditching OpenSSL and switching to BoringSSL. For Linux distributions that doesn't even make sense because we've removed too much for many applications to run unaltered [...]

From a [blog post](https://www.imperialviolet.org/2015/10/17/boringssl.html) about BoringSSL, Adam Langley says you probably don't want BoringSSL: > I am not saying that people should be ditching OpenSSL and switching to BoringSSL. For Linux distributions that doesn't even make sense because we've removed too much for many applications to run unaltered [...]
Sign in to join this conversation.
No Label
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: alanorth/ansible-personal#16
No description provided.