OpenBSD just forked OpenSSL. They called it LibreSSL. http://www.openbsdfoundation.org/.
Would it be possible to have a tag 'LibreSSL' created for it on stackoverflow.com?
OpenBSD is legendary for its security and OpenSSL has room for improvement at times, so I expect the projects to diverge to the point they are not similar in some areas. The OpenBSD folks have already gutted a lot of cruft, and more modifications are coming. For example, SSLv2 support has been removed, as has all the custom-but-not-quite-right reimplementations like OPENSSL_printf
, BUF_strlcpy
, and BUF_strlcat
.
OpenBSD does not plan on upstream patches because OpenSSL usually does not act on patches for bug fixes and features. For example, see the years old bug OpenSSL fails if used from multiple threads and with SSL_MODE_RELEASE_BUFFERS in their tracker. And OpenSSL does not accept patches from people in the United States. See, for example, Re: Could openssl foundation give itself rules not to accept money from intelligence agencies?.