Switch to BoringSSL? #16

New Issue

2015-05-24T09:55:53+02:00

alanorth commented

2015-05-24 09:55:53 +02:00

(Migrated from github.com)

BoringSSL is Google's fork of OpenSSL 1.0.2 which cleans up some code and adds new cipher suites like ECDHE-RSA-CHACHA20-POLY1305. There are no binary builds for BoringSSL and nginx also has to be built specifically to support this...

A few guides:

BoringSSL is Google's fork of OpenSSL 1.0.2 which cleans up some code and adds new cipher suites like `ECDHE-RSA-CHACHA20-POLY1305`. There are no binary builds for BoringSSL and nginx also has to be built specifically to support this... A few guides: - https://gist.githubusercontent.com/wmark/d208d82c6424810f1b7c/raw/43e7b9115de9af44043524937387ceb055ea451e/install.sh - https://calomel.org/nginx.html

alanorth commented

2016-04-02 19:19:42 +02:00

(Migrated from github.com)

From a blog post about BoringSSL, Adam Langley says you probably don't want BoringSSL:

I am not saying that people should be ditching OpenSSL and switching to BoringSSL. For Linux distributions that doesn't even make sense because we've removed too much for many applications to run unaltered [...]

From a [blog post](https://www.imperialviolet.org/2015/10/17/boringssl.html) about BoringSSL, Adam Langley says you probably don't want BoringSSL: > I am not saying that people should be ditching OpenSSL and switching to BoringSSL. For Linux distributions that doesn't even make sense because we've removed too much for many applications to run unaltered [...]

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: alanorth/ansible-personal#16