Is there an openssl.exe available?

[DarwinJS]

@bagajjal, @SteveL-MSFT, @anmenaga

We were discussing over at http://disq.us/p/2mb1vvj that the last windows binaries published by the LibreSSL (version 2.2.5) project included an openssl.exe binary for Windows.

Could this project also create one?

[user8446]

It's here as well: https://sourceforge.net/projects/libressl-3-2-0-for-windows/files/

[bagajjal]

@DarwinJS, We currently don't have plans to do a release that includes openssl.exe.
LibreSSL release (in this repo) is not signed. Win32-OpenSSH (repo) will consume the LibreSSL release binaries and do a final release that has all the signed binaries. We also have a backlog work item to move to OpenSSL for FIPS compliance reason.

[DarwinJS]

That great to know. What kind of rough timeframe are you hoping for release of it?

[user8446]

Hi @bagajjal,

FIPS compliance only satisfies a small subset of clients - federal systems. It is also detrimental to security. LibreSSL is much more secure: https://resources.infosecinstitute.com/topic/libressl-the-secure-openssl-alternative/

I would recommend keeping LibreSSL with Win32-OpenSSH for the security of the community and maybe OpenSSL for the few needing FIPS compliance.