[Pkg-openssl-devel] syncing up openssl dev efforts, DEfO making custom packages for ECH support

Hans-Christoph Steiner hans at guardianproject.info
Wed Aug 30 18:46:59 BST 2023


Hello, we're part of the DEfO project (https://defo.ie), we are working on 
implementing the TLS Encrypted ClientHello standard in OpenSSL and things that 
depend on OpenSSL.  We want to start shipping binary Debian packages of our 
development fork of OpenSSL so that it is easy for people to try ECH.  We 
currently follow OpenSSL's main branch pretty closely, so I we will probably 
have to change the Debian packaging to support OpenSSL that (since its currently 
on 3.1.x from what I can tell).

So I'm opening this discussion to figure out how best we can push our work 
upstream to your package, and sync up with your development efforts.  I'm a DD 
and have maintained some shared libraries, so I'm familiar with that work, but 
not so skilled at it.

We have received two years of funding from the Open Tech Fund, so we should have 
time to put into this.  We would also consider contracting with an OpenSSL 
package maintainer to do this work.

.hc



More information about the Pkg-openssl-devel mailing list