Linux mara amfani yana dawowa daga LibreSSL zuwa OpenSSL

Masu haɓaka rarrabawar Linux Void Linux sun amince da wani tsari, wanda aka yi la'akari da shi tun Afrilu na bara, don komawa ɗakin karatu na OpenSSL. An shirya maye gurbin LibreSSL tare da OpenSSL don Maris 5th. Ana sa ran wannan canjin ba zai yi tasiri a kan yawancin tsarin masu amfani ba, amma zai sauƙaƙe sauƙaƙe kulawar rarrabawa da warware batutuwa da yawa, kamar ba da damar ikon gina OpenVPN tare da ɗakin karatu na TLS na asali (a halin yanzu, saboda batutuwa tare da LibreSSL, an gina kunshin tare da Mbed TLS). Farashin komawa zuwa OpenSSL zai zama raguwar wasu fakitin da suka dogara da tsohuwar OpenSSL API, wanda aka rage a cikin sabbin rassan OpenSSL amma an kiyaye shi a cikin LibreSSL.

Ayyukan Gentoo, Alpine, da HardenedBSD sun riga sun koma daga LibreSSL zuwa OpenSSL. Babban dalilin komawa ga OpenSSL shine haɓaka rashin daidaituwa tsakanin LibreSSL da OpenSSL, wanda ya buƙaci ƙarin faci, rikitacciyar kulawa, da hana sabuntawar sigar. Misali, masu haɓaka Qt suna watsi da tallafi ga LibreSSL kuma suna matsawa nauyin warware matsalolin daidaitawa ga masu haɓaka rarrabawa, suna buƙatar ƙarin ƙarin aiki zuwa tashar jiragen ruwa Qt6 don amfani da LibreSSL.

Bugu da ƙari kuma, saurin ci gaban OpenSSL ya haɓaka a cikin 'yan shekarun nan, tare da gagarumin aikin da ake yi don inganta tsaro na codebase da kuma ƙara ƙayyadaddun kayan aiki na kayan aiki, da kuma cikakken aiwatar da TLS 1.3. Yin amfani da OpenSSL kuma zai ba da izinin faɗaɗa tallafi don algorithms na ɓoyewa a cikin wasu fakiti; alal misali, ƙayyadaddun saitin sifofi ne kawai aka kunna a cikin Python lokacin da aka gina shi da LibreSSL.

source: budenet.ru