All Topics
All Topics
Technology
Technology
Design
Design
Programming
Programming
Science
Science
News
News
Gaming
Gaming
Entertainment
Entertainment
Business
Business
Finance
Finance
Sports
Sports
Health
Health
Food
Food
Travel
Travel
Art
Art
Music
Music
Books
Books
Education
Education
Politics
Politics
Personal
Personal
No algorithm. No AI slop. No ads. Just RSS. Pro-human. Indie writers. Real journalism. Open web. Chronological. Hand toasted.

Evaluation of WolfSSL as an OpenSSL Alternative for HAProxy Server

By

thomasjb

3mo ago· 5 min readenReview

Summary

The article details the author's negative experience attempting to use WolfSSL as a drop-in replacement for OpenSSL in an HAProxy server. Despite WolfSSL's advertised OpenSSL API compatibility layer, the author encountered unexplained errors and found the library to be incomplete and poorly documented. The piece critiques various SSL/TLS libraries including OpenSSL, BoringSSL, AWS-LC, GnuTLS, and LibreSSL, concluding that there are no good alternatives for certain use cases.

Key quotes

· 5 pulled
OpenSSL sucks. The BoringSSL and AWS-LC forks are Googled and Amazoned to death; they don't care about anyone but their own use cases.
I can't remember ever having a good experience with software using GnuTLS. LibreSSL is incomplete...
This post is about the experience of taking a leap of faith and using WolfSSL as a drop-in replacement for an existing Haproxy server which traditionally uses OpenSSL.
The WolfSSL project specifically has an OpenSSL API compatibility layer so you can presumably swap out OpenSSL almost anywhere.
I encountered some unexplainable errors with it in my implementation.
Snippet from the RSS feed
OpenSSL sucks. The BoringSSL and AWS-LC forks are Googled and Amazoned to death; they don't care about anyone but their own use cases. I can't remember ever having a good experience with software using GnuTLS. LibreSSL is incomplete... FOREWARD This post

You might also wanna read