Minimal client

Phil Leblanc philanc at gmail.com
Thu Jul 2 03:29:13 BST 2020


On Thu, Jul 2, 2020 at 12:37 AM Michael Forney <mforney at mforney.org> wrote:
>
> Have you looked at the TLS 1.3 page (https://bearssl.org/tls13.html)?
> It suggests that support for TLS 1.3 is planned, [...]

Thanks! I don't know how I missed this page :-)

>
> I'm not sure if there are any existing gemini clients using libtls,
> but if there are, you might be interested in
> https://git.sr.ht/~mcf/libtls-bearssl. You could get a much smaller
> statically linked binary by just linking against libtls-bearssl
> instead of libtls from LibreSSL.

Your project is very nice! I built your libtls-bearssl library and
then rebuilt the 'nc' client that comes with LibreSSL against your
libtls.a and libbearssl.a.

Just a minor issue:   " undefined reference to `explicit_bzero' ". I
provided it with a quick hack and I could build  the libreSSL 'nc'
with bearssl  - Here are the executable sizes:
   LibreSSL nc  1,976 KB
   The _same_ nc linked against bearssl and your libtls-bearssl  276
KB  -- Wow!! and it works fine! :-)

(both are built static with musl libc, -Os, stripped)

> -Michael

Thanks!

Phil


More information about the Gemini mailing list