On 12 Jun 2015, at 11:44, Olle E. Johansson oej@edvina.net wrote:

On 12 Jun 2015, at 11:33, Fabian Gast f.gast@ethon.com wrote:

...

Hello,

is somebody currently working on compatibility to LIbreSSL?

My first try working on this causes a crash if the TLS connection is terminated, other stuff appears to work.

We are using a memory allocation function in OpenSSL that doesn't exist in LibreSSL. I guess you did not compile with LibreSSL libraries :-)

0(25708) INFO: tls [tls_mod.c:355]: mod_init(): With ECDH-Support! 0(25708) INFO: tls [tls_mod.c:358]: mod_init(): With Diffie Hellman 0(25708) INFO: tls [tls_init.c:574]: init_tls_h(): tls: _init_tls_h: compiled with openssl version "LibreSSL 2.1" (0x20000000), kerberos support: off, compression: off 0(25708) INFO: tls [tls_init.c:582]: init_tls_h(): tls: init_tls_h: installed openssl library version "LibreSSL 2.1" (0x20000000), kerberos support: unknown, zlib compression: unknown

There are no other ssl libraries on this box.

So for now we are not compatible. If someone wants to work on this and provide a patch, I think it's a good thing.

I am currently working on this. I just wanted to ask if somebody else is doing the same, so we / i / you dont’t have to do the same work twice.

My current problem is this one: (On termination of a TLS connection)

14(17110) BUG: tls [tls_bio.c:125]: tls_BIO_mbuf_set(): null BIO ptr 14(17110) ERROR: tls [tls_server.c:294]: tls_set_mbufs(): failed to set mbufs 0(12888) ALERT: <core> [main.c:784]: handle_sigs(): child process 17110 exited by a signal 10

Fabian