Replacing OpenSSL in base -- does it work?

Shawn Webb shawn.webb at
Wed Dec 13 01:58:49 UTC 2017

On Tue, Dec 12, 2017 at 05:57:29PM -0800, Chris H wrote:
> Hi all,
> I just fired off a fresh build on a new 12-CURRENT install. But forgot
> to add WITHOUT_OPENSSL to src.conf(5), as I had intended to. :-(
> Anyway, I'd like to remove OpenSSL from base. Any recommendations on the
> best approach, and best alternatives?

Both HardenedBSD and TrueOS use LibreSSL in base.


Shawn Webb
Cofounder and Security Engineer

GPG Key ID:          0x6A84658F52456EEE
GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89  3D9E 6A84 658F 5245 6EEE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <>

More information about the freebsd-current mailing list