Support Matrix

tlspuffin provides tooling to download, patch, and build several preset library configurations. This page describes the current support for these presets.

tooling support

The process for building the preset libraries is currently transitioning to use the mk_vendor tool in a manner consistent across all presets using:

./tools/mk_vendor make <preset>

As this is still work in progress, if a preset is marked with no mk_vendor support, you will need to build it through cargo:

cargo build --release -p tlspuffin --features=<preset>

OpenSSL

Version	ASAN support1	security claims	transcript extraction	mk_vendor preset2
3.1.2	yes	yes	yes	openssl:openssl312
1.1.1u	yes	yes	yes	openssl:openssl111u
1.1.1k	yes	yes	yes	openssl:openssl111k
1.1.1j	yes	yes	yes	openssl:openssl111j
1.0.2u	yes	yes	yes	openssl:openssl102u
1.0.1f	yes	yes	yes	openssl:openssl101f

LibreSSL

Version	ASAN support1	security claims	transcript extraction	mk_vendor preset2
3.3.3	yes	no	no	work in progress (cargo preset: libressl333)

wolfSSL

Version	ASAN support1	security claims	transcript extraction	mk_vendor preset2
4.3.0	yes	no	yes	work in progress (cargo preset: wolfssl430)
5.1.0	yes	no	yes	work in progress (cargo preset: wolfssl510)
5.2.0	yes	no	yes	work in progress (cargo preset: wolfssl520)
5.3.0	yes	no	yes	work in progress (cargo preset: wolfssl530)
5.4.0	yes	no	yes	work in progress (cargo preset: wolfssl540)

BoringSSL

Version	ASAN support1	security claims	transcript extraction	mk_vendor preset2
2023.11	yes	no	yes	work in progress (cargo preset: boringssl202311)
2024.03	yes	no	yes	work in progress (cargo preset: boringssl202403)

Footnotes

1. ASAN is available on platforms where Clang has support for ASAN ↩ ↩² ↩³ ↩⁴

2. mk_vendor let you build a preset library independently of tlspuffin's cargo-based build system, by running ./tools/mk_vendor make <preset> ↩ ↩² ↩³ ↩⁴