On 17:33 Sat 02 Nov, Reyk Floeter wrote: > Why libtls? Because it is a sane TLS API with secure defaults. I > trust the decisions of the LibreSSL developers and libtls provides > some the best defaults. > > The code works on OpenBSD and Linux. Many distributions such as > Ubuntu don't seem to provide LibreSSL packages, so the very nice > libtls API is not available for them. My crate tries to download, > build, and link LibreSSL statically if it is not found.
A bit of an offtopic, but most of the time people revert back to OpenSSL due to lags in API compatibility between the two projects. Maybe it would be better to provide libtls as a standalone library that can coexist with OpenSSL. E.g. install libssl.so and libcrypto.so as libressl.so and librecrypto.so and make libtls.so depend on them instead of libssl.so and libcrypto.so.
