{"id":6095,"date":"2014-08-05T08:50:38","date_gmt":"2014-08-05T06:50:38","guid":{"rendered":"http:\/\/daniel.haxx.se\/blog\/?p=6095"},"modified":"2014-08-05T08:50:38","modified_gmt":"2014-08-05T06:50:38","slug":"libressl-vs-boringssl-for-curl","status":"publish","type":"post","link":"https:\/\/daniel.haxx.se\/blog\/2014\/08\/05\/libressl-vs-boringssl-for-curl\/","title":{"rendered":"libressl vs boringssl for curl"},"content":{"rendered":"<p>I tried to use two <a href=\"http:\/\/www.openssl.org\/\">OpenSSL<\/a> forks yesterday with <a href=\"http:\/\/curl.haxx.se\/\">curl<\/a>. I built both from  source first (of course, as I wanted the latest and greatest) an interesting thing in itself since both  projects have modified the original build system so they&#8217;re now three  different ways.<\/p>\n<p><a href=\"http:\/\/www.libressl.org\/\">libressl<\/a> 2.0.0 installed and built flawlessly  with curl and I&#8217;ve pushed a change that shows LibreSSL instead of  OpenSSL when doing curl -V etc.<\/p>\n<p><a href=\"https:\/\/boringssl.googlesource.com\/boringssl\/\">boringssl<\/a> didn&#8217;t compile from git  until I had manually fixed a minor nit, and then it has no &#8220;make  install&#8221; target at all so I had manually copy the libs and header files  to a place suitable for curl&#8217;s configure to detect. Then the curl build  failed because boringssl isn&#8217;t API compatiable with some of the really  old DES stuff &#8211; code we use for NTLM. I asked Adam Langley about it and <a href=\"https:\/\/twitter.com\/agl__\/status\/496448856788172800\"> he told me<\/a> that calling code using DES &#8220;needs a tweak&#8221; &#8211; but I haven&#8217;t  yet walked down that road so I don&#8217;t know how much of a nuisance that  actually is or isn&#8217;t.<\/p>\n<p>Summary: as an openssl replacement, libressl wins this round over boringssl with 3 &#8211; 0.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I tried to use two OpenSSL forks yesterday with curl. I built both from source first (of course, as I wanted the latest and greatest) an interesting thing in itself since both projects have modified the original build system so they&#8217;re now three different ways. libressl 2.0.0 installed and built flawlessly with curl and I&#8217;ve &hellip; <a href=\"https:\/\/daniel.haxx.se\/blog\/2014\/08\/05\/libressl-vs-boringssl-for-curl\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">libressl vs boringssl for curl<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[392,33,391,193],"class_list":["post-6095","post","type-post","status-publish","format-standard","hentry","category-curl","tag-boringssl","tag-curl-and-libcurl","tag-libressl","tag-openssl"],"_links":{"self":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/6095","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/comments?post=6095"}],"version-history":[{"count":7,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/6095\/revisions"}],"predecessor-version":[{"id":6102,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/posts\/6095\/revisions\/6102"}],"wp:attachment":[{"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/media?parent=6095"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/categories?post=6095"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/daniel.haxx.se\/blog\/wp-json\/wp\/v2\/tags?post=6095"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}