Replacing OpenSSL, one step at a time

rustls-libssl is a new project that provides a drop-in replacement for OpenSSL's libssl, with the goal of easy retrofitting of memory-safe TLS into existing applications. The talk will start with a general overview of recent work on rustls and then introduce rustls-libssl. We'll dive into some of the challenges Joe has encountered, like 1) various depraved details of the openssl API that made this project particularly challenging, 2) building a shared library from rust, with correctly versioned symbols, 3) writing rust emulations of your native dependencies so miri can run all your tests. Slides: https://github.com/rustnl/meetups/blob/main/20240507-delft/slides/Replacing%20OpenSSL%2C%20one%20step%20at%20a%20time%20-%20Joe%20Birr-Pixton.pdf Follow Joe on: twitter: https://twitter.com/jpixton/ mastodon: https://octodon.social/@jpixton github: https://github.com/ctz This talk was given at RustNL 2024, in Delft, The Netherlands. Playlist of other talks from RustNL 2024: https://www.youtube.com/playlist?list=PL8Q1w7Ff68DBZZbJt3ie5MUoJV5v2HeA7 Want to come to RustWeek 2025 in-person? go to https://2025.rustnl.org