[Solved...] Openssl alternative?

If you are looking for a specific 64-bit package and you can't find it in any of the 64-bit repos, please post a request for it here
Post Reply
User avatar
n0ctilucient
Shogun
Shogun
Posts: 408
Joined: 21 Apr 2017, 15:59
Distribution: fullmoonremix
Location: 127.0.0.1
Contact:

[Solved...] Openssl alternative?

Post#1 by n0ctilucient » 04 Mar 2018, 17:00

LibreSSL is an ultra lightweight highly secure alternative to Openssl ( Heartbleed ???)...
Site is @... http://www.libressl.org/
Source is @... https://github.com/libressl-portable/portable/releases

This package has not been adopted yet by ("slackonly" or)...
https://slakfinder.org
https://slackbuilds.org
https://pkgs.org

So far... I have not been able to successfully compile
this package with the following src2pkg conf...
see... Src2pkg.conf w/ "hardened" EXTRA_FLAGS

Thanx... in advance to anyone that is interested in sharing their precompiled package link.
Last edited by n0ctilucient on 29 Mar 2018, 13:37, edited 1 time in total.
:hmmm: I do NOT have the "right" to tell anyone what they should do...
but I reserve the "right" to tell them what they should "consider".

User avatar
n0ctilucient
Shogun
Shogun
Posts: 408
Joined: 21 Apr 2017, 15:59
Distribution: fullmoonremix
Location: 127.0.0.1
Contact:

Openssl alternative?

Post#2 by n0ctilucient » 06 Mar 2018, 16:45

So it appears... after Libressl installation the dropin has to be used
to compile a target package for it to not conflict with Openssl.

(or... maybe this is just a BSD thing) :unknown:

Replacing openssl with libressl for ports...

From 20160616 onward, you must indicate in make.conf that you want to use an SSL port.

Code: Select all

+DEFAULT_VERSIONS= ruby=2.1 python3=3.5 ghostscript=agpl ssl=libressl
see... https://rsmith.home.xs4all.nl/freebsd/r ... ports.html
Last edited by n0ctilucient on 29 Mar 2018, 13:34, edited 1 time in total.
:hmmm: I do NOT have the "right" to tell anyone what they should do...
but I reserve the "right" to tell them what they should "consider".

User avatar
n0ctilucient
Shogun
Shogun
Posts: 408
Joined: 21 Apr 2017, 15:59
Distribution: fullmoonremix
Location: 127.0.0.1
Contact:

[Solved...] Openssl alternative?

Post#3 by n0ctilucient » 29 Mar 2018, 13:34

(or... maybe the dropin is easier) :unknown:
(just change your PATH to point to the libressl one instead of your system default one)

see... https://obvi.us/crypto/libressl/
:hmmm: I do NOT have the "right" to tell anyone what they should do...
but I reserve the "right" to tell them what they should "consider".

User avatar
n0ctilucient
Shogun
Shogun
Posts: 408
Joined: 21 Apr 2017, 15:59
Distribution: fullmoonremix
Location: 127.0.0.1
Contact:

[Solved...] Openssl alternative?

Post#4 by n0ctilucient » 30 Mar 2018, 00:45

Update... this is the "extra" section of my /etc/src2pkg/src2pkg.conf that I used to compile this package.

Code: Select all

# ==================[fullmoonremix]
EXTRA_LDFLAGS="-L/usr/lib64 -ldl -lpthread -lrt -ldl"
EXTRA_FLAGS="-fstack-protector-all -fstack-check --param ssp-buffer-size=4 -fPIC -D_FORTIFY_SOURCE=2 -pthread -pipe -momit-leaf-frame-pointer -fomit-frame-pointer -fmerge-all-constants"
EXTRA_CONFIGS="sysconfdir=/etc bindir=/usr/bin libdir=/usr/lib64 "
# =================================
I had to remove my default RELRO and mcheck optimization to get it to compile... :wall:

Pls Note: ...no additional procedures are required to make the package work.

Just compile... convert... install and it works right out the box!

(I'm using it to make this post)... ;)
:hmmm: I do NOT have the "right" to tell anyone what they should do...
but I reserve the "right" to tell them what they should "consider".

User avatar
n0ctilucient
Shogun
Shogun
Posts: 408
Joined: 21 Apr 2017, 15:59
Distribution: fullmoonremix
Location: 127.0.0.1
Contact:

[Solved...] Openssl alternative?

Post#5 by n0ctilucient » 30 Mar 2018, 13:16

Update... I guess there is a caveat. It's NOT actually out of the box... :oops:

After installation you will need to delete /lib64.libssl.so.1
then... copy the symlink /usr/lib64/libssl.so to /lib64
then... remame libssl.so to libssl.so.1
then... you're good to go!
:hmmm: I do NOT have the "right" to tell anyone what they should do...
but I reserve the "right" to tell them what they should "consider".

Post Reply