Impact of new OpenSSL vulnerabilties on LibreSSL 01 mar 2016 | Last updated: 01 mar 2016 16:17
As announdes about a week ago, today a new load of OpenSSL vulnerabilities is disclosed. Latest impact analysis: No need to scramble.
read more...Porting OpenSSL 1.1.0 28 feb 2016 | Last updated: 28 feb 2016 14:04
Just for fun I decided to port OpenSSL 1.1.0 pre3 (alpha) for FreeBSD. The process starts out with copying the existing OpenSSL port but I found a lot of room for simplification. The picture is just a quip...
read more...OpenSSL 1.1.0 improvements 27 feb 2016 | Last updated: 27 feb 2016 00:01
OpenSSL 1.1.0 adds configuration options and uses saner defaults
read more...Upcoming OpenSSL vulnerabilities 27 feb 2016 | Last updated: 27 feb 2016 12:44
Coming Tuesday (1 March 2016) OpenSSL will release new versions that fix multiple vulnerabilities, at least one of them rated "High". Being curious to see if I need to scramble to patch things up, I dug into the information I could find on these vulnerabilities.
read more...Going to Canada 26 feb 2016
I'll be speaking at BSDCan 2016 on the topic of OpenSSL and LibreSSL in FreeBSD. The talk will address SSL in base and in ports, support timelines, security issues, remoaved features and more.
read more...