LibreSSL can&#x27;t be used everywhere OpenSSL is currently used.  Notably (and intentionally) missing is FIPS 140-2 support, which most (almost all?) commercial product that uses OpenSSL will rely upon for selling a FIPS 140-2 compliant or validated product.<p>Personally, I find Network Security Services (NSS) much better designed than OpenSSL&#x2F;LibreSSL and wish more things would use it.  Notably better is the use of an actual database to store objects.  This really helps when you are using certificate revocation lists (CRLs) which may be huge blobs that change frequently.