Linux yopanda kanthu imabwerera kuchokera ku LibreSSL kupita ku OpenSSL

Omwe akupanga kugawa kwa Void Linux avomereza pempho lomwe lakhala likuganiziridwa kuyambira Epulo chaka chatha kuti abwerere kugwiritsa ntchito laibulale ya OpenSSL. Kusintha kwa LibreSSL ndi OpenSSL kukukonzekera pa Marichi 5. Zimaganiziridwa kuti kusinthaku sikudzakhudza machitidwe a ogwiritsa ntchito ambiri, koma kudzakhala kosavuta kusamalira kugawa ndikuthetsa mavuto ambiri, mwachitsanzo, zidzatheketsa kusonkhanitsa OpenVPN ndi laibulale ya TLS yokhazikika (pakadali pano, chifukwa kumavuto ndi LibreSSL, phukusili limapangidwa ndi Mbed TLS). Mtengo wobwerera ku OpenSSL udzakhala kutha kwa chithandizo cha maphukusi ena omwe amamangiriridwa ku OpenSSL API yakale, thandizo lomwe linathetsedwa m'nthambi zatsopano za OpenSSL, koma linasungidwa ku LibreSSL.

M'mbuyomu, ma projekiti a Gentoo, Alpine ndi HardenedBSD abwerera kale kuchokera ku LibreSSL kupita ku OpenSSL. Chifukwa chachikulu chobwereranso kwa OpenSSL chinali kusagwirizana komwe kukukulirakulira pakati pa LibreSSL ndi OpenSSL, zomwe zidapangitsa kuti pakhale kufunikira kopereka zigamba zowonjezera, kukonza zovuta ndikupangitsa kuti zikhale zovuta kusinthira mitundu. Mwachitsanzo, opanga Qt amakana kuthandizira LibreSSL, ndikusiya ntchito yothetsa mavuto ogwirizana kwa opanga ogawa, zomwe zimafuna ntchito yowonjezera yowonjezera ku doko la Qt6 pogwiritsa ntchito LibreSSL.

Kuphatikiza apo, liwiro lachitukuko cha OpenSSL lakwera kwambiri m'zaka zaposachedwa, ndi ntchito yayikulu yomwe yachitika kuti apititse patsogolo chitetezo cha code base ndikuwonjezera kukhathamiritsa kwapapulatifomu ya hardware, ndikupereka kukhazikitsidwa kwathunthu kwa TLS 1.3. Kugwiritsa ntchito OpenSSL kudzalolanso kuthandizira kokulirapo kwa ma algorithms achinsinsi m'maphukusi ena; mwachitsanzo, ku Python, ikapangidwa ndi LibreSSL, magawo ochepa okha a ciphers adaphatikizidwa.

Source: opennet.ru

Kuwonjezera ndemanga