OpenSSL Communities

Topics for Brno F2F

Paul YangPaul Yang Tue 14 Apr 2026 3:38AMPublicSeen by 23

In yesterday's BAC monthly meeting, each community was required to have a topic list before the Brno F2F meeting in May. For the committers community, what do you guys like to put on the list?

For me personally, I find involving the Rust language into the project interests me a lot. So, topics:

  1. Rust. Providers implemented in Rust? Or we can refactor some core code of OpenSSL by using Rust?

  2. TBD...

Richard Levitte (individual)

Richard Levitte (individual)Thu 16 Apr 2026 12:26PM

This would make things much more transparent, and verifiable on per commit basis if anyone finds that important.

Simo Sorce

Simo SorceFri 17 Apr 2026 1:09PM

@Richard Levitte (individual) If you are collecting suggestions for that page then:

1) PKCS#11 Provider is now: https://github.com/openssl-projects/pkcs11-provider so both link and org needs to be updated

2) You may want to consider whether to add Kryoptic: https://github.com/latchset/kryoptic

This one is tricky, but when built with --feature=fips it creates a statically linked module that is both a PKCS#11 softoken and an OpenSSL FIPS provider (it currently embeds the OpenSSL 4.0 provider when built that way).

Richard Levitte (individual)

Richard Levitte (individual)Sun 19 Apr 2026 1:28PM

@ssorce, thanks for the update. Provider-corner being a provider corner, I think I'll stick to that, even though Kryoptic was interesting to look at.

But, for the future, it's preferable to raise an issue directly with that repo, so as not to saturate the thread here, which isn't quite related.

Norbert Pócs

Norbert PócsMon 27 Apr 2026 11:07AM

My suggestion for topic would be clean code.

  1. What areas of the code would be beneficial to clean up/refactor?

  2. What are the things that make the code unreadable and hard to understand which should go and be replaced?

Shane Lontis

Shane LontisWed 29 Apr 2026 2:41AM

Related to 2)
Hard to Read(/Debug) nested Macros vs expanded form e.g. https://github.com/openssl/openssl/pull/30926/changes#diff-7a39d0fcd854bb417feefebe7756553703ff6faf0f8e811055c1030db999ff88R460


Adding API Helper functions to hide OSSL_PARAM for common parameters (for KDF's MAC's etc) e.g. https://github.com/openssl/openssl/pull/30989