HackerTube

THE VIDEO SHELF · libressl and openssl

LibreSSL: The first 30 days, and what the Future Holds

Bob Beck of OpenBSD gives a BSDCan 2014 talk on the first month of LibreSSL, the OpenSSL fork. He explains why they forked, what they removed, and examples of the problems found in the OpenSSL code base.

Watch & explore the libraryYouTube ↗

Why HN readers recommended it

Recommended as a funny, fascinating tour of how bad the OpenSSL code was and what cleanup looks like.

This is a summary from the source dataset, not an endorsement by Hacker News or the video creator.

Video & recommendation details

Creator / channel
Andrea Ross
Topic
libressl and openssl
Format
talk
Level
intermediate
HN recommenders in dataset
3
HN mentions in dataset
4
Recommendation years in dataset
2014–2022

These counts and years describe the included Hacker News records; they are not YouTube views or the video’s publication date.

From the original HN conversations

Excerpts from the recorded comments. Follow each source for the full comment and surrounding discussion.

  • Anyone interested in details of LibreSSL development can watch the BSDCan talk at [VIDEO] - there really are a LOT of instances of braindamaged code in OpenSSL and a radical repair is pretty much the only thing which will work.

    ivoras on Hacker News · 2014-05
    In OpenSSL, OpenSSH and NTP to receive support from Core Infrastructure Initiative

  • There is a fascinating and funny talk by Bob Beck from OpenBSD on the first 30 days after forking OpenSSL. One of the things he addresses is the scary code and how is prevents community involvement. He also talks a great deal about all that …

    mrweasel on Hacker News · 2020-05
    In OpenSSL 3.0

  • I'd expect higher quality code review from OpenBSD folks (who maintain LibreSSL), compared to OpenSSL. Also, an interesting talk: LibreSSL: The first 30 days, and what the Future Holds from BSDCan: < [VIDEO] >

    yakubin on Hacker News · 2022-10
    In Patch OpenSSL on November 1 to avoid “critical” security vulnerability

Summaries, classifications and recommendation records are from the HackerTube source dataset. Read about this library and its limitations.