LibreSSL Is there an openssl.exe available?

@bagajjal, @SteveL-MSFT, @anmenaga

We were discussing over at http://disq.us/p/2mb1vvj that the last windows binaries published by the LibreSSL (version 2.2.5) project included an openssl.exe binary for Windows.

Could this project also create one?

Jan 23 '22 21:01 DarwinJS

It's here as well: https://sourceforge.net/projects/libressl-3-2-0-for-windows/files/

Jan 25 '22 16:01 user8446

@DarwinJS, We currently don't have plans to do a release that includes openssl.exe. LibreSSL release (in this repo) is not signed. Win32-OpenSSH (repo) will consume the LibreSSL release binaries and do a final release that has all the signed binaries. We also have a backlog work item to move to OpenSSL for FIPS compliance reason.

Jan 25 '22 21:01 bagajjal

That great to know. What kind of rough timeframe are you hoping for release of it?

Jan 25 '22 22:01 DarwinJS

Hi @bagajjal,

FIPS compliance only satisfies a small subset of clients - federal systems. It is also detrimental to security. LibreSSL is much more secure: https://resources.infosecinstitute.com/topic/libressl-the-secure-openssl-alternative/

I would recommend keeping LibreSSL with Win32-OpenSSH for the security of the community and maybe OpenSSL for the few needing FIPS compliance.

Jan 26 '22 00:01 user8446