Hacker News Reader

MacOS ships OpenSSH linked against LibreSSL

Alpinelinux (where this bug was found)

Alpine could very well be the largest user of LibreSSL due to its popularity in Linux container circles.

DragonFly uses it for base and packages.

I think there are FreeBSD people working on getting it into base. I know people have replaced the base OpenSSL with LibreSSL on their own.

Edit: This is not the case as feld has pointed out below.

Not currently in the plans because the support window for LibreSSL is significantly shorter than a FreeBSD release support cycle.

Thanks for the correction, I've edited my comment.

HardenedBSD wanted to do LibreSSL in base but /usr/bin/openssl version on my home server still returns "OpenSSL 1.0.2k-freebsd". I use LibreSSL from ports anyway :) but it'd be nice to have it in base, yeah.

By the way I actually do use client certificates on my home server. It's behind my ISP's NAT though, no incoming connections from outside are possible lol

Yes, you have to roll your own. But for hardened setups one has build hosts anyway, so it's just a single config setting to rule them all.