Questions tagged [libressl]

LibreSSL is a version of the TLS/SSL protocol forked from OpenSSL.

LibreSSL is a version of the //crypto stack forked from in 2014.

External Links:

50 questions
175
votes
5 answers

How to install wget in macOS?

I try to install wget in MAC OS 10.11.1 but when I run ./configure --with-ssl=openssl I get this error: configure: error: --with-ssl=openssl was given, but SSL is not available. How to resolve this problem in OSX 10.11.1?
cfranco
  • 2,133
  • 5
  • 16
  • 20
6
votes
3 answers

Homebrew on macOS: brew update says LibreSSL error: SSL_ERROR_SYSCALL, errno 54

Since I updated to the latest version of macOS 10.15.4 Catalina, when I do brew update I'm getting this error: fatal: unable to access 'https://github.com/Homebrew/homebrew-cask/': LibreSSL SSL_read: SSL_ERROR_SYSCALL, errno 54 I used to be fine…
RocketNuts
  • 7,383
  • 6
  • 29
  • 64
5
votes
1 answer

How to set the default LibreSSL on Mac to the one installed by homebrew

I checked the version of LibreSSL on my mac, it's not the latest one. $ openssl version LibreSSL 2.6.5 And I installed a more recent version by homebrew homebrew install libressl The one installed by homebrew is 2.8.3. But after I installed the…
wh41e
  • 113
  • 1
  • 8
3
votes
1 answer

Why has LibreSSL stopped releasing windows binaries as of 2.6?

In this list: https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/ there are no longer files libressl-*-windows.zip as of version 2.6.0. Was an announcement made public about that?
Stijn Sanders
  • 33,408
  • 9
  • 43
  • 59
3
votes
1 answer

curl "no start line" LibreSSL errors after update to OSX High Sierra

I am trying to connect to a server using curl; this server requires a .p12 certificate file and a passphrase. This has not been a problem in the few weeks I have been running my program. However, after my update to High Sierra, I now get LibreSSL…
3
votes
2 answers

string.h:29:8: error: expected identifier

I'm trying to compile nginx with custom openssl »libressl« using this script: https://gist.github.com/Belphemur/3c022598919e6a1788fc Everything works fine using libressl 2.1.1. Problem is that libressl 2.1.1 has some security issues, which have been…
2
votes
0 answers

What TLS/SSL protocol is in use when using tls_client_method?

I have the following source to connect websocket server using TLS/SSL protocol : struct sessionTLS { int sid; SSL_CTX *ctx; SSL *ssl; }; sessionTLS tls ; tls.ctx = SSL_CTX_new(TLS_client_method()); According to libressl manual :…
barfatchen
  • 1,426
  • 18
  • 41
2
votes
1 answer

LibreSSL: free memory allocated by tls_init()

When using LibreSSL's libtls, is it possible to free the memory that is allocated by tls_init()? I found using valgrind that a simple program that only calls tls_init() code leaves 2058 blocks of memory "still reachable". I am aware that "still…
rexroni
  • 433
  • 4
  • 13
2
votes
1 answer

Which is the easiest to use, well-maintained and stable API for DTLS 1.2 implementation?

There are several implementations of TLS that support DTLS 1.2. Wikipedia has an exhaustive link here. My reading points to the classic openssl, libressl, boringssl and mbed TLS as viable options. I am only interested in DTLS 1.2 API and nothing…
Sunny
  • 6,849
  • 6
  • 38
  • 69
2
votes
2 answers

Encryption with AES-256-GCM using (LibreSSL) libcrypto

Given an appropriate key and iv, this C program should encrypt stdin, outputting to stdout. EVP_CIPHER_CTX *ctx = EVP_CIPHER_CTX_new(); EVP_EncryptInit(ctx, EVP_aes_256_gcm(), key, iv); const size_t block_size = 128; unsigned char…
user1741222
2
votes
2 answers

OpenSSL or LibreSSL C++ sample for client TLS connection

I am searching for a client TLS connection example in C++. Best for Visual Studio, but honestly it can be any compiler. I found several C samples. But no one worked. I started with this sample in…
Martin Schlott
  • 4,039
  • 2
  • 21
  • 44
2
votes
1 answer

Getting google search ssl pem certificate

For testing purpose I want to set up a https connection to google and start a search. I downloaded the OpenSSL example from here. In the code, I have to load a pem file here: /* http://www.openssl.org/docs/ssl/SSL_CTX_load_verify_locations.html…
Martin Schlott
  • 4,039
  • 2
  • 21
  • 44
2
votes
2 answers

How do I correctly enforce OpenSSL certificates?

I'm currently tinkering on what is effectively a chat server. Since I do not want to expose my users too much, I added TLS encryption to it using LibreSSL's fork of the OpenSSL library. The rest of the code appears to work fine, but I think I am not…
uliwitness
  • 7,806
  • 31
  • 50
2
votes
2 answers

How to build openSSH with NSS or GnuTLS instead of OpenSSL?

Due to security issues with OpenSSL, I would like to use NSS or GnuTLS instead. For Apache server needs, it is easy since there exist a module for each one. But for SSH, it looks like difficult if not impossible. Dropbear embeds its own algorithms…
lalebarde
  • 1,279
  • 1
  • 14
  • 33
2
votes
4 answers

Is there a way to run LibreSSL on Windows?

I would like to use LibreSSL instead of OpenSSL on Windows, but I found no distribution yet. Did I miss it? Or is there a not too complicated way to compile it myself?
mafu
  • 28,708
  • 38
  • 138
  • 232
1
2 3 4