2017-05-19 10:32 AEST by Arthur Barrett - We've considered replacing OpelSSL with more 'secure' (and better licensed?) alternatives like Bug 6891 s2n 
from amazon.

I recently noticed that the OpenVPN client for iOS (Apple iPhone etc.) uses PolarSSL, which is apparently now 
called mbed tls and has it's official page here (though currently unreachable):
https://tls.mbed.org/

The source code is here:
https://github.com/ARMmbed/mbedtls

2020-06-04 11:38 AEST by Arthur Barrett - Created an attachment (id=3446)
pdf of blog about tls certificate chains

Note: bug 6891 is about another TLS implementation, so I've linked them
together.

This article has interesting things to say about TLS implementation in OpenSSL
and GnuTLS:
https://www.theregister.com/2020/06/02/sectigo_root_cert_expires/

The article is largely about this blog post:
https://www.agwa.name/blog/post/fixing_the_addtrust_root_expiration

Criticism of OpenSSL seems to be growing, but I'm not sure if there is
consensus around an alternative.