Void Linux e khutla ho tloha LibreSSL ho ea OpenSSL

Bahlahisi ba kabo ea Void Linux ba amohetse tlhahiso e ntseng e nahanoa ho tloha ka Mmesa selemong se fetileng ea ho khutlela ts'ebelisong ea laeborari ea OpenSSL. Ho nkeloa sebaka ha LibreSSL ka OpenSSL ho reriloe ka la 5 Hlakubele. Ho nahanoa hore phetoho e ke ke ea ama mekhoa ea basebelisi ba bangata, empa e tla nolofatsa haholo tlhokomelo ea kabo 'me e tla rarolla mathata a mangata, mohlala, e tla etsa hore ho khonehe ho bokella OpenVPN ka laebrari e tloaelehileng ea TLS (hona joale, ho mathata a LibreSSL, sephutheloana se hlophisitsoe le Mbed TLS). Theko ea ho khutlela ho OpenSSL e tla ba ho emisoa ha tšehetso bakeng sa liphutheloana tse ling tse hokahaneng le OpenSSL API ea khale, tšehetso ea eona e ileng ea khaotsoa makaleng a macha a OpenSSL, empa ea bolokoa ho LibreSSL.

Pejana, merero ea Gentoo, Alpine le HardenedBSD e se e khutlile ho tloha LibreSSL ho ea OpenSSL. Lebaka le ka sehloohong la ho khutla ha OpenSSL e ne e le ho se lumellane ho ntseng ho hola pakeng tsa LibreSSL le OpenSSL, ho lebisitseng tlhokong ea ho fana ka li-patches tse ling, tlhokomelo e rarahaneng le ho etsa hore ho be thata ho ntlafatsa liphetolelo. Ka mohlala, bahlahisi ba Qt ba hana ho tšehetsa LibreSSL, 'me ba tlohela mosebetsi oa ho rarolla mathata a ho lumellana ho bahlahisi ba kabo, e leng se hlokang mosebetsi o mongata o eketsehileng ho port Qt6 ha u sebelisa LibreSSL.

Ho feta moo, lebelo la nts'etsopele ea OpenSSL le potlakile lilemong tsa morao tjena, ka mosebetsi o moholo o entsoeng ho ntlafatsa ts'ireletso ea motheo oa khoutu le ho eketsa lisebelisoa tse khethehileng tsa sethala sa hardware, le ho fana ka ts'ebetsong e feletseng ea TLS 1.3. Ho sebelisa OpenSSL ho tla boela ho lumelle tšehetso e atolositsoeng bakeng sa li-algorithms tsa encryption ka har'a liphutheloana tse ling; mohlala, ho Python, ha e hlophisitsoe le LibreSSL, ho kenyelelitsoe sehlopha se lekanyelitsoeng feela sa li-ciphers.

Source: opennet.ru

Eketsa ka tlhaloso