[Pdns-dev] PowerDNS Authoritative Server 4.0.0-alpha2 released

Justin Clift justin at postgresql.org
Thu Feb 25 18:08:55 UTC 2016

On 2016-02-25 18:05, Pieter Lexis wrote:
> So first off, we don't use the TLS stacks from any of the crypto
> libraries, just the hash and cryptographic primitives to sign for
> DNSSEC, so we're most likely hardly affected by OpenSSL TLS issues.
> The main reason we switched to OpenSSL is that in our testing, we
> noticed that signature generation was an order of magnitude faster
> with OpenSSL compared to mbedTLS and Crypto++ due to the ASM
> optimizations of OpenSSL. I tested builing against LibreSSL 2.3, which
> works :), so you can always do that.

Thanks Pieter, that's the missing info. :)

+ Justin

More information about the Pdns-dev mailing list