> On 10/22/14 21:27, Chris Cappuccio wrote: > > Gregory Edigarov [ediga...@qarea.com] wrote: > >> Hi, > >> > >> Since we are already go with re-engineering of openssl becoming libressl, > >> why not provide some clean and intuitive interface instead of that crap > >> openssl(1) is? For example ressl(1) would be the new "high level" interface > >> with very few selected frequently used functions, and openssl(1) with low > >> level interface as it is now > > Umm..What do you imagine this new ressl utility will do? > > > > There are a lot of examples of how to do very specific things with the > > openssl > > command line utility on the web today. Why is another utility, one with less > > features, why is it necessary? > Yes, there are a lot of such examples, and these examples are only > necessary and exist because openssl(1) interface is a crap. I do not > believe OpenBSD is about such a crap. Instead, I think OpenBSD is about > providing a clean and good engineered interfaces, to mostly eliminate > the need for "a lot of examples of how to do very specific things with > the openssl command line utility " (C). > > something like: > ressl generate privkey > ressl generate csr > ressl sign
Those "examples" you speak of are... there is a better word. They are recipes. Changing to a whole new commandline will not help anyone.