Yet another wrinkle in the TLS library woes

I downloaded and compiled libretls [1], a libtls for OpenSSL (Secure Socket Layer) [2]. I also recompiled my Lua wrapper for libtls [3] and reran the profiling tests [4] from the other day.

I can now say for certain that there is no need to profile LibreSSL [5] because the results speak for themselves—an accumulation of 24 CPU (Central Processing Unit) seconds using OpenSSL vs. 1 minutes, 24 seconds using LibreSSL. Looking at the results, it makes some sense. The LibreSSL library I'm using the the “portable version” for non-OpenBSD (Berkeley Software Division) systems, and there's probably little work to making it fast.

So now I have to rethink my using LIBRESSL_VERSION_NUMBER [6] when compiling the Lua module. I will no longer be using the LibreSSL version and I can't exactly rely upon the TLS_API value either … sigh.

[1] https://git.causal.agency/libretls/

[2] https://www.openssl.org/

[3] https://github.com/spc476/lua-conmanorg/blob/master/src/tls.c

[4] /boston/2020/12/28.1

[5] https://www.libressl.org/

[6] /boston/2018/08/07.1

Gemini Mention this post

Contact the author