libressl-2.1.4

[Igor Živković]

Opening this as a place to note testing results with packages that can use OpenSSL as I'm going to replace it with LibreSSL in my next build. Might be useful reference if it's going to be included in the official book in the future. I see that it's already mentioned on the OpenSSH page.

[Fernando de Oliveira]

Yes, I think it was somewhere in the release notes or in the configure, and included it somewhere, probably OpenSSH.

But I believe I've read negative criticisms about it, or they stated in their page that it was not yet mature.

Writing that so that you take care.

[Igor Živković]

apr-util: ok

cacerts: c_rehash perl script is not provided with libressl but I used multi_c_rehash which is written in C (​http://www.j10n.org/files/multi_c_rehash-1.2.tar.gz) and seems to be working fine

curl: needs a patch

cyrus-sasl: ok

dovecot: ok

exim: ok

fetchmail: needs a patch

ffmpeg: ok

git: ok

heirloom-mailx: needs a patch

hexchat: needs a patch

httpd: needs a patch

ldns: ok

libarchive: ok

libevent: ok

links: needs a patch

mariadb: ok

mupdf: ok

mutt: needs a patch

neon: needs a patch

nmap: needs a patch

openldap: ok

openssh: ok

php: needs a patch

postfix: needs a patch

postgresql: ok

proftpd: ok

python2: needs a patch

python3: needs a patch

ruby: ok

qt4: needs a patch

serf: ok

stunnel: needs a patch

tcpdump: ok

tripwire: ok

unbound: ok

wireshark: ok

wpa_supplicant: ok

xorg-server: ok

[Igor Živković]

curl patch not needed anymore

mutt patch not needed anymore

[Igor Živković]

New openssl(1) command 'certhash' replaces the c_rehash script.

[Igor Živković]

python3.4.3: Make ssl.RAND_egd() optional to support LibreSSL. The availability of the function is checked during the compilation.

[bdubbs@…]

Milestone renamed