I was told OpenSSL 3 was bad for the longest time, I used 1.1x for everything, but switched to Libressl.
Now that I need to switch to AWS Linux they are using OpenSSL 3, my question is should I still be hating on OpenSSL?
Now that I need to switch to AWS Linux they are using OpenSSL 3, my question is should I still be hating on OpenSSL?
Not sure who told you OpenSSL 3 (2021) was bad. It postdates the period where OpenSSL might not have been the right choice. (Among other things, OpenSSL 3 unifies FIPS and non-FIPS consumers, which is nice if you need FIPS.)
> There was a dark period between 2010 and 2016 where OpenSSL might not have been the right answer, but that time has passed. OpenSSL has gotten better, and, more importantly, OpenSSL is on-the-ball with vulnerability disclosure and response.
> Using anything besides OpenSSL will drastically complicate your system for little, no, or even negative security benefit. So just keep it simple.
https://latacora.micro.blog/2018/04/03/cryptographic-right-a...
i haven't seen mention of openssl 3 anywhere within the context of Linux 2
https://docs.aws.amazon.com/linux/al2022/ug/compare-al2-to-A...