From nobody Fri Oct 07 12:34:57 2022 X-Original-To: dev-commits-ports-main@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4MkSSK5F95z4dfgV; Fri, 7 Oct 2022 12:34:57 +0000 (UTC) (envelope-from danfe@freebsd.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4MkSSK4hmmz3m3S; Fri, 7 Oct 2022 12:34:57 +0000 (UTC) (envelope-from danfe@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1665146097; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=JTdDNO3C+kaPyPhzhOCpinsorgDoj+Mr3K7spbJ7mNE=; b=MmzVtoMp3Is0C+0SXYqcc3uktgqEcOpaoz5bI102ez0tgGVh7SDjLMVajNLZ/6FC9kOGM0 F6c2HSHiV5eu/UJY2q6GDvh/Mzyc249XDrwGdxMarnE9luEqwz2DEPIim8cPiTMp5YPlgY 7Usn9rwpA6f3Nx/fJqO4PUmTHXnqvHrDwYlDOpkDa02mqPUVvyb0SP4UWE7w1pqHInmrXm LE7Llrr9iYv3JUxcJS+l5zdpKueuAntrVHMT7ZXMqvOPGfS2hmtZZRqj965UDMjZhDUqV0 iVocdomBwuNaJkplijbMrXPMqEFHe8XWD+FnneSpHavkv6luCahemtrYnylHMQ== Received: by freefall.freebsd.org (Postfix, from userid 1033) id 8A00AFC9A; Fri, 7 Oct 2022 12:34:57 +0000 (UTC) Date: Fri, 7 Oct 2022 12:34:57 +0000 From: Alexey Dokuchaev To: Matthias Andree Cc: Ganael Laplanche , Ganael LAPLANCHE , ports-committers@freebsd.org, dev-commits-ports-all@freebsd.org, dev-commits-ports-main@freebsd.org, portmgr Subject: Re: git: 9a36ff5299c8 - main - ftp/lftp: Fix build with libressl >= 2.7.0 Message-ID: References: <202210051845.295Ijrbg014568@gitrepo.freebsd.org> <34183267-0f60-bb0d-61c8-424d3b704fcd@tu-dortmund.de> <5bf28223-f496-0aa7-3dd2-9294ff4237c3@tu-dortmund.de> List-Id: Commits to the main branch of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-main List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-main@freebsd.org X-BeenThere: dev-commits-ports-main@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <5bf28223-f496-0aa7-3dd2-9294ff4237c3@tu-dortmund.de> ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1665146097; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=JTdDNO3C+kaPyPhzhOCpinsorgDoj+Mr3K7spbJ7mNE=; b=k4W2i4pO01BUsQcHzILvqj2NM+ozNszmXcXZCPJN590WpQUZOcJiTISSulmrmzlsDG5p5H 4EyF5ZIcAEgo3CO2nzixph4F8mSOhVUMboNPmTW1VxJE/cCshJ+dhfkWobHkF9pFkQ+3Zb V0VSlZHe2NED1mNqVGIryKUOZGEcxknML4A/AN/jRpmK7uWpwUho88bQfNYSAA3iu4JiUv LVPhcFzWhEJ7hL26XZSQaQRVDv5e7wYknRpPM8HFd1YLL+b818spqGiim94JSHUxN7F90F bxLUNindW/YAgfSkdcgnHWZYoFQXIq9qaZYgmBDwfcMCGVrfYV5nleAYhZqSuw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1665146097; a=rsa-sha256; cv=none; b=B0vU+m80YYsmNanM/Tt4j2JrvnNE+PVIoDVdxtqsNGaWClYaJBipXdd0aJh4FbrkEu+zRn EJcnB1Yv0vD0f7DASTYPWLxLUg1eAArLJk0ukojHMBU0UYesDMIZWaACg7yIP118L3bKxu IhL518+2kdP12g7lpCA0jQK3PAvwccBtDq/B5wuui5dzu8Oo8+f8BWyNM2L37b95lZv5OR /4U89jCdTMiNqwVmAQWN6U46snCRfBwWrJPyP/k9At/uVUoZLjdMXxWamlqGlKS1Qad03p I/GFqWcVQf25wg/6VrWdjg9IWoHbxKLfkiMZ6Wlkp1DYgVxKSoFy2V1HWTGpzA== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N On Thu, Oct 06, 2022 at 10:04:23PM +0200, Matthias Andree wrote: > ... > (I just don't understand the benefit of supporting LibreSSL in the > framework at all. There have been a few months where LibreSSL was > "better" than OpenSSL) +1 (and those with better crystal ball had foreseen this shortly after LibreSSL was conceived). When Heartbleed shocked the world, there was a lot of hysteria^Wconcerns that OpenSSL is poorly written and even worse maintained, understaffed and underfunded. Since then they've fixed both the code and the processes, and nowadays LibreSSL does little good but distracts developers' precious resources. While there are some (mostly legacy) software that does benefit from LibreSSL because it still provides some API that had been removed in contemporary OpenSSL versions, I'd rather see those programs fixed and LibreSSL buried, to much rejoice. ./danfe