Skip to content
EntityQ16590706· pop 13· linked from 187 articles

LibreSSL is an open-source implementation of the Transport Layer Security (TLS) protocol. The implementation is named after Secure Sockets Layer (SSL), the deprecated predecessor of TLS, for which support was removed in release 2.3.0. The OpenBSD project forked LibreSSL from OpenSSL 1.0.1g in April 2014 as a response to the Heartbleed security vulnerability, with the goals of modernizing the codebase, improving security, and applying development best practices.

Key facts

Software.name
LibreSSL
Software.logo
LibreSSL logo.png
Software.logo caption
Puffy, the mascot of OpenBSD, made to resemble King Ferdinand
Software.author
The OpenSSL Project
Software.developer
The OpenBSD Project
Software.released
2.0.0 /
Software.programming language
C, assembly, Perl
Software.operating system
OpenBSD, FreeBSD, NetBSD, Linux, HP-UX, Solaris, macOS, Windows and others
Software.genre
Cryptography library
Software.license
Apache-1.0, BSD-4-Clause, ISC, public domain

via Wikipedia infobox

Wikidata facts

Show 5 more facts
software version identifier
4.3.1
source code repository URL
cvsweb.openbsd.org/src/lib/libssl
publication date
2014-07-11
mailing list archive URL
marc.info/?l=libressl
Commons category
LibreSSL
Sources (8)

via Wikidata · CC0

~9 min read

Article

13 sections
Contents
  • History
  • Adoption
  • Changes
  • Memory-related
  • Proactive measures
  • Cryptographic
  • Added features
  • Old insecure features
  • Code removal
  • Bug backlog
  • See also
  • References
  • External links

LibreSSL is an open-source implementation of the Transport Layer Security (TLS) protocol. The implementation is named after Secure Sockets Layer (SSL), the deprecated predecessor of TLS, for which support was removed in release 2.3.0. The OpenBSD project forked LibreSSL from OpenSSL 1.0.1g in April 2014 as a response to the Heartbleed security vulnerability, with the goals of modernizing the codebase, improving security, and applying development best practices.

== History == After the Heartbleed security vulnerability was discovered in OpenSSL, the OpenBSD team audited the codebase and decided it was necessary to fork OpenSSL to remove dangerous code. The libressl.org domain was registered on 11 April 2014; the project announced the name on 22 April 2014. In the first week of development, more than 90,000 lines of C code were removed. Unused code was removed, and support for obsolete operating systems (Classic Mac OS, NetWare, OS/2, 16-bit Windows) and some older operating systems (OpenVMS) was removed.

Connections

Categories