GhostBSD Source Tree

OpenSSL provides support for the QUIC secure transport protocol (carried over UDP), which offers advantages like multiple communication streams, fast connection initiation, and connection migration.

Version Support:

• OpenSSL 3.2+: Supports making QUIC connections as a client.
• OpenSSL 3.5+: Adds support for server-side QUIC.

Key Resources for Developers:

• Introductory Guides: The [OpenSSL Guide] covers TLS, QUIC, and other functionalities.
• API Reference: The openssl-quic(7) manual page provides a reference for QUIC functionality and how the API differs from standard TLS.
• Code Samples:
  • Complete source for guide samples: demos/guide/
  • Demo-Driven Design (DDD) examples: doc/designs/ddd/
  • HTTP/3 client example (using nghttp3): demos/http3/
  • Basic QUIC server implementation: demos/quic/server/

libfido2 provides library functionality and command-line tools to communicate with FIDO devices over USB or NFC. It also provides capabilities to verify attestation and assertion signatures.

Supported Protocols:

• FIDO U2F (CTAP 1)
• FIDO2 (CTAP 2)

Core Dependencies:

• libcbor
• OpenSSL (1.1 or newer)
• zlib
• libudev (Required on Linux)

Language Bindings:

• .NET: Fido2Net
• Go: go-libfido2
• Perl: p5-FIDO-Raw
• Rust: libfido2

The OpenSSL toolkit is a commercial-grade toolkit for TLS, DTLS, and QUIC protocols, consisting of three primary components:

• libssl: Implements TLS protocol versions up to TLSv1.3 ([RFC 8446]), DTLS protocol versions up to DTLSv1.2 ([RFC 6347]), and the QUIC version 1 protocol ([RFC 9000]).
• libcrypto: A general-purpose cryptographic library that serves as the foundation for the TLS implementation but can be used independently.
• openssl: A command-line utility used for cryptographic tasks such as:
  • Creating key parameters.
  • Creating X.509 certificates, CSRs, and CRLs.
  • Calculating message digests.
  • Encryption and decryption.
  • Testing SSL/TLS/DTLS clients and servers.
  • Testing QUIC clients.
  • Handling S/MIME signed or encrypted mail.

dma is a lightweight Mail Transport Agent (MTA) intended for home and office environments. It functions by accepting mail from locally installed Mail User Agents (MUA) and delivering it either locally or to remote destinations.

Key features for remote delivery include:

• TLS/SSL support
• SMTP authentication

Note: dma is not a replacement for heavy-duty MTAs like sendmail(8) or postfix(1). It does not listen on port 25 for incoming connections.

libsodium is a portable, cross-compilable software library designed for high-level cryptographic operations. It is a fork of NaCl with a compatible API and provides extended functionality for:

• Encryption and decryption
• Digital signatures
• Password hashing
• Other core cryptographic operations

It is designed to be easy to use and provides the building blocks for creating higher-level cryptographic tools.

openresolv is a resolvconf implementation designed to manage the /etc/resolv.conf file. It acts as a middleman between network configuration services (like DHCP daemons) and the local domain name resolution configuration.

It solves the problem of multiple network interfaces (e.g., wired, wireless, or VPNs) competing to control /etc/resolv.conf. Instead of simply appending nameservers, openresolv stores, removes, and lists full resolv.conf configurations generated for specific interfaces, allowing for dynamic ordering and zone-based configuration.

The if_qlxgbe driver for the QLogic 83xx 10Gigabit Ethernet/CNA supports the following hardware offload and networking features:

• Large Segment Offload: Supported over both TCP IPv4 and TCP IPv6.
• Checksum Offload: Supported for TCP and UDP over both IPv4 and IPv6.
• Receive Side Scaling (RSS)
• Jumbo Frames
• VLAN Tagging

Portable OpenSSH is a complete implementation of the SSH protocol (version 2) designed for secure remote login, command execution, and file transfer. It is a port of OpenBSD's OpenSSH to Unix-like operating systems (Linux, OS X, Cygwin) and includes polyfills for OpenBSD APIs, sshd sandboxing, and support for OS-native authentication like PAM.

Core components include:

• ssh: The SSH client.
• sshd: The SSH server.
• scp and sftp: File transfer utilities.
• ssh-keygen: Key generation tool.
• ssh-agent: Run-time key storage.
• Various supporting programs.