<![CDATA[Just woke up to 5 vulnerability alerts (4 high severity) of the openSSL Rust crate.]]>Just woke up to 5 vulnerability alerts (4 high severity) of the openSSL Rust crate. Now I'm even more thankful we've made the switch to rustls in lychee. I've only seen advantages so far. The transition was totally smooth, and now we have faster, more stable and apparently more secure TLS.

Thank you @djc, @ctz et al. for this amazing piece of software!

Link Preview Image
]]>https://board.circlewithadot.net/topic/559073bd-a7ef-4218-8c7b-6688ad5027db/just-woke-up-to-5-vulnerability-alerts-4-high-severity-of-the-openssl-rust-crate.RSS for NodeFri, 15 May 2026 04:33:54 GMTThu, 23 Apr 2026 06:51:48 GMT60<![CDATA[Reply to Just woke up to 5 vulnerability alerts (4 high severity) of the openSSL Rust crate. on Thu, 23 Apr 2026 06:58:25 GMT]]>Here we switched before the last release in February: https://github.com/lycheeverse/lychee/pull/1928

It resolved multiple inconsistencies as lychee behaved differently on each target platform as the target platform's openSSL implementation was used. Switching to rustls has resolved multiple long-standing issues and we haven't received any related bug reports since.

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/thomas_zahner/statuses/116452721014365246https://board.circlewithadot.net/post/https://mastodon.social/users/thomas_zahner/statuses/116452721014365246Thu, 23 Apr 2026 06:58:25 GMT