Re: ceph + -lssl

[Willem Jan Withagen <wjw@digiware.nl>]

On 27-2-2016 08:50, Marcus Watts wrote:
> On Fri, Feb 26, 2016 at 12:43:24PM -0800, Yehuda Sadeh-Weinraub wrote:
>> I rebased these 4 commits on top of a recent master, and here's the
>> new pull request:
>> https://github.com/ceph/ceph/pull/7825
>>
>> On Tue, Feb 23, 2016 at 9:09 PM, Marcus Watts <mwatts@redhat.com> wrote:
>>> I've been working on better integrating ssl int ceph.
> ...
> 
> Thanks Yehuda for doing this.
> 
> Matt pointed out in the pull request that cmake builds were failing
> on this branch.  I've pushed a commit to fix that.

I know I'm not doing the work, but would it be possible to base the work
on for example LibreSSL from OpenBSD or BoringSSL from Google.

From the things I've seen and read about it, these libraries are (good)
attempts to shed a lot of cruft of openssl resulting in a compacter and
better build lib.

Next to the history of OpenBSD which is "not all that bad" for security.
And I'd expect Ceph to only use the more modern parts of the lib, and
thus historical compatibility is not that important here.
--WjW