As LibreSSL
follows the same goals than our packaging guidelines in stability and security concerns, we have decided to remove OpenSSL
and use LibreSSL as our default provider of Secure Sockets Layer (SSL) and Transport Layer Security (TLS) protocols. The decision means that the Milky Way v0.2
will be the last version supporting OpenSSL.
LibreSSL is a version of the TLS/crypto stack forked from OpenSSL in 2014, with goals of modernizing the codebase
, improving security
, and applying best practice development processes
.
It was forked
from the OpenSSL
in April 2014
as a response by OpenBSD developers
to the Heartbleed security vulnerability in OpenSSL, with the aim of refactoring the OpenSSL code
so as to provide a more secure implementation
.
To ease the transition, OpenSSL
support will remain in the stable repositories for the time being, while we are removing it in the White Hole
version. As of Milky Way v0.3 release, OpenSSL
support will be completely removed without further notice.
Further details: